{"id":"CVE-2024-45508","details":"HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node.","modified":"2026-08-12T15:15:33.441679Z","published":"2024-09-01T00:00:00Z","related":["openSUSE-SU-2024:0303-1","openSUSE-SU-2024:0304-1","openSUSE-SU-2024:14308-1","openSUSE-SU-2026:20219-1"],"database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/45xxx/CVE-2024-45508.json","cna_assigner":"mitre"},"references":[{"type":"WEB","url":"https://github.com/michaelrsweet/htmldoc/blob/2d5b2ab9ddbf2aee2209010cebc11efdd1cab6e2/CHANGES.md"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/45xxx/CVE-2024-45508.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-45508"},{"type":"REPORT","url":"https://github.com/michaelrsweet/htmldoc/issues/528"},{"type":"FIX","url":"https://github.com/michaelrsweet/htmldoc/commit/2d5b2ab9ddbf2aee2209010cebc11efdd1cab6e2"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/michaelrsweet/htmldoc","events":[{"introduced":"0"},{"fixed":"48f878925cd57575c7906686351b67ece10571f3"},{"fixed":"2d5b2ab9ddbf2aee2209010cebc11efdd1cab6e2"}],"database_specific":{"cpe":"cpe:2.3:a:htmldoc_project:htmldoc:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"1.9.19"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["v1.9.18","v1.9.17","v1.9.16","v1.9.15","v1.9.14","v1.9.13","v1.9.12","v1.9.11","v1.9.10","v1.9.9","v1.9.8","v1.9.7","v1.9.6","v1.9.5","v1.9.4","v1.9.3","v1.9.2","v1.9.1","v1.9","v1.8.30"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-45508.json","vanir_signatures_modified":"2026-08-12T15:15:33Z","vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["68782867560060017259724923564816750929","160264590626436307499930712334009916347","300369049026148807027730437905144355335","27365475782180572492597347525659984954"],"threshold":0.9},"id":"CVE-2024-45508-01e0d9cc","signature_type":"Line","signature_version":"v1","source":"https://github.com/michaelrsweet/htmldoc/commit/2d5b2ab9ddbf2aee2209010cebc11efdd1cab6e2","target":{"file":"htmldoc/ps-pdf.cxx"}},{"source":"https://github.com/michaelrsweet/htmldoc/commit/2d5b2ab9ddbf2aee2209010cebc11efdd1cab6e2","target":{"file":"htmldoc/ps-pdf.cxx","function":"parse_paragraph"},"deprecated":false,"digest":{"function_hash":"441327441782029693950174389595358123","length":14220},"id":"CVE-2024-45508-231704bb","signature_type":"Function","signature_version":"v1"}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}