A vulnerability was found in HTACG tidy-html5 5.8.0. It has been rated as problematic. This issue affects the function prvTidyParseNamespace of the file src/parser.c. The manipulation leads to reachable assertion. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.
| Link | Tags |
|---|---|
| https://vuldb.com/?id.313613 | technical description vdb entry |
| https://vuldb.com/?ctiid.313613 | permissions required signature |
| https://vuldb.com/?submit.601008 | third party advisory |
| https://github.com/htacg/tidy-html5/issues/1142 | issue tracking |
| https://github.com/user-attachments/files/19825297/tidy-html5_crash_2.txt | exploit |