A vulnerability classified as problematic has been found in HTACG tidy-html5 5.8.0. Affected is the function defaultAlloc of the file src/alloc.c. The manipulation leads to memory leak. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://github.com/htacg/tidy-html5/issues/1152 | Exploit Issue Tracking |
| https://github.com/user-attachments/files/20438303/tidy-html5_crash_3.txt | Exploit |
| https://vuldb.com/?ctiid.313614 | Permissions Required VDB Entry |
| https://vuldb.com/?id.313614 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.601009 | Third Party Advisory VDB Entry |
| https://github.com/htacg/tidy-html5/issues/1152 | Exploit Issue Tracking |
Configurations
History
30 Sep 2025, 18:21
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:htacg:tidy:5.8.0:*:*:*:*:*:*:* | |
| First Time |
Htacg tidy
Htacg |
|
| References | () https://github.com/htacg/tidy-html5/issues/1152 - Exploit, Issue Tracking | |
| References | () https://github.com/user-attachments/files/20438303/tidy-html5_crash_3.txt - Exploit | |
| References | () https://vuldb.com/?ctiid.313614 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.313614 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.601009 - Third Party Advisory, VDB Entry |
23 Jun 2025, 20:16
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
23 Jun 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/htacg/tidy-html5/issues/1152 - |
23 Jun 2025, 02:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-06-23 02:15
Updated : 2025-09-30 18:21
NVD link : CVE-2025-6498
Mitre link : CVE-2025-6498
CVE.ORG link : CVE-2025-6498
JSON object : View
Products Affected
htacg
- tidy