CVE-2022-38223 - CVE House
Back to Database
Status published High CVE-2022-38223

There is an out-of-bounds write in checkType located in etc.c...

Vulnerability Description

There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTML file to the w3m binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-38223

Credits & Attribution

No credits recorded in the NVD database.

References

More from tats

View All →
CVE-2018-6198
w3m through 0.5.3 does not properly handle temporary files when...
Medium 4.7
CVE-2018-6197
w3m through 0.5.3 is prone to a NULL pointer dereference...
High 7.5
CVE-2018-6196
w3m through 0.5.3 is prone to an infinite recursion flaw...
High 7.5
CVE-2016-9633
An issue was discovered in the Tatsuya Kinoshita w3m fork...
Medium 6.5
CVE-2016-9632
An issue was discovered in the Tatsuya Kinoshita w3m fork...
Medium 6.5

Affected Vendor

Affected Software

w3m, fedora
Vulnerable Versions:
0.5.3, 36, 37

Timeline

Official Publish: August 15th, 2022
Last Modified: November 4th, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.