CVE-2025-6498CWE-401CWE-404
HTACG tidy-html5 alloc.c defaultAlloc memory leak
Medium · published June 23, 2025
What it is
A vulnerability classified as problematic has been found in HTACG tidy-html5 5.8.0. Affected is the function defaultAlloc of the file src/alloc.c. The manipulation leads to memory leak. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
The record
Technical detail
- CVSS v4.0
- 4.8 · MEDIUM
- Vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
- EPSS
- 0.00233 · 13.4th percentile
- Weaknesses
- CWE-401 · Missing Release of Memory after Effective Lifetime; CWE-404 · Improper Resource Shutdown or Release
- Published
- 2025-06-23T01:31Z
EPSS history
Timeline