CVE-2025-6496

Impact

A vulnerability was found in HTACG tidy-html5 5.8.0. It has been declared as problematic. This vulnerability affects the function InsertNodeAsParent of the file src/parser.c. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/htacg/tidy-html5/issues/1141
• https://github.com/user-attachments/files/19652942/tidy-html5_crash.txt
• https://vuldb.com/?ctiid.313612
• https://vuldb.com/?id.313612
• https://vuldb.com/?submit.601007