CVE-2022-23850

HIGH 7.8CVE-2022-23850 · Published 23/01/2022 · updated 17/06/2026

In short

CVE-2022-23850 is a HIGH (CVSS 7.8) vulnerability affecting epub2txt (epub2txt project).
Chance of exploitation in the next 30 days (EPSS): 0.87%, higher than 58.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
epub2txt epub2txt_project	`≤ 2.02`	No fix yet

xhtml_translate_entity in xhtml.c in epub2txt (aka epub2txt2) through 2.02 allows a stack-based buffer overflow via a crafted EPUB document.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.