michaelrsweet

Products

ProductCVEsExploitedLatest
pdfio4–Aug 21, 2026
htmldoc1–Nov 14, 2022
mxml1–Oct 19, 2026

Exploited and recent CVEs

  • CVE-2026-112094 Medium 5.5 michaelrsweet mxml mxml-file.c mxml_load_data use after free 0.2%
  • CVE-2026-77220 Medium 6.5 PDFio < 1.6.5 Dangling Pointer via Dictionary String-Formatting 0.4%
  • CVE-2024-42358 Medium 6.2 Loop with Unreachable Exit Condition ('Infinite Loop') in pdfio 0.3%
  • CVE-2023-28428 Medium 6.2 PDFio vulnerable to Denial Of Service when opening a corrupt PDF file 0.2%
  • CVE-2023-24808 Medium 5.3 Denial Of Service when opening a corrupt PDF file in pdfio 0.7%
  • CVE-2022-0137 High 7.5 A heap buffer overflow in image_set_mask function of HTMLDOC before 1.9.15 allows an attacker to write outside the buffer boundaries. 0.6%