CVE-2026-58472 | GNU Wget through 1.25.0, fixed in commit dd692d9, contains a… | CVSS 5.9 MEDIUM

Description

GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the html_quote_string() function in src/convert.c that allows a remote attacker to trigger memory corruption by supplying a crafted HTML attribute with a large number of characters requiring entity encoding. A server-supplied HTML attribute causes a signed integer counter to overflow during output size accumulation, resulting in an undersized heap allocation and subsequent heap buffer overflow during the copy phase.

Metadata

CVE ID: CVE-2026-58472
State: PUBLISHED
Assigner: VulnCheck
Reserved: 2026-06-30 20:20 UTC
Published: 2026-07-07 19:50 UTC
Last updated: 2026-07-07 19:50 UTC
Primary CWE: CWE-190
Integer Overflow or Wraparound
Vendor / Product: gnuwget / wget
Sources: cve.org · NVD

Severity & Metrics

5.9 MEDIUM CVSS 3.1

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H

Affected products (1)

Vendor	Product	Platform	Versions
gnuwget	wget	—	0 ≤ 1.25.0, dd692d9cea5335b181d877ae917fe6e75587a812

Weakness (CWE)

CWE	Source	Description
CWE-190	cna	Integer Overflow or Wraparound

CVSS scores (2)

Score	Severity	Version	Source	Vector
6.0	MEDIUM	4.0	cna	CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
5.9	MEDIUM	3.1	cna	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H

References (2)