CVE-2023-38252

🗓️ 14 Jul 2023 17:06:20Reported by redhatType

Out-of-bounds read flaw in w3m's Strnew_size function in Str.

Reporter	Title	Published	Views	Family All 47
AlpineLinux	CVE-2023-38252	14 Jul 202317:06	–	alpinelinux
Circl	CVE-2023-38252	14 Jul 202322:22	–	circl
CNNVD	w3m 缓冲区错误漏洞	14 Jul 202300:00	–	cnnvd
Cvelist	CVE-2023-38252 W3m: out of bounds read in strnew_size() at w3m/str.c	14 Jul 202317:06	–	cvelist
Debian CVE	CVE-2023-38252	14 Jul 202317:06	–	debiancve
EUVD	EUVD-2023-42072	3 Oct 202520:07	–	euvd
Fedora	[SECURITY] Fedora 39 Update: w3m-0.5.3-63.git20230121.fc39	27 Mar 202401:27	–	fedora
Fedora	[SECURITY] Fedora 40 Update: w3m-0.5.3-63.git20230121.fc40	23 Mar 202400:54	–	fedora
Fedora	[SECURITY] Fedora 38 Update: w3m-0.5.3-63.git20230121.fc38	27 Mar 202401:37	–	fedora
Tenable Nessus	Fedora 38 : w3m (2024-38c2261ca0)	26 Mar 202400:00	–	nessus

NVD

Node

tats w3mMatch0.5.3+git20230121

Node

fedoraproject extra_packages_for_enterprise_linuxMatch8.0

fedoraproject fedoraMatch38

redhat enterprise_linuxMatch6.0

[
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 6",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "w3m",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:6"
    ]
  }
]

Source	Link
github	www.github.com/tats/w3m/issues/270
access	www.access.redhat.com/security/cve/CVE-2023-38252
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/AULOBQJLXE2KCT5UVQMKGEFL4GFIAOED/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/MKFZQUK7FPWWJQYICDZZ4YWIPUPQ2D3R/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/TODROGVCWZ435HQIZE6ARQC5LPQLIA5C/

21 Nov 2025 06:00Current

4.8Medium risk

Vulners AI Score4.8

CVSS 3.14.7 - 5.5

EPSS0.00014

CWE-125