HTMLDOC buffer overflow vulnerability (CNVD-2023-67081)

HTMLDOC is an open source program that can convert HTML and Markdown files to EPUB, Indexed HTML, PostScript and PDF formats. HTMLDOC version 1.9.12 suffers from a buffer overflow vulnerability that stems from an out-of-bounds flaw found in the parse_tree() function of toc.cxx, which results in the disclosure of memory layout information in the data. An unauthenticated attacker could exploit this vulnerability to execute arbitrary code.