{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"man2html","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":[],"id":"tcs_01M5NFZCQ7X2F66NK96ECYN882","modified_at":"2026-10-23T18:03:33.151303276Z","published_at":"2022-09-09T18:15:09.247Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2021-40648","https://security-tracker.debian.org/tracker/CVE-2021-40648"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2021-40648#Debian:14/man2html","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2021-40648"}],"summary":"In man2html 1.6g, a filename can be created to overwrite the previous size parameter of the next chunk and the fd, bk, fd_nextsize, bk_nextsize of the current chunk. The next chunk is then freed later"}