CVE-2020-26148

Published September 30th, 2020

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

MEDIUM

Affected

PROJECT

Description

md_push_block_bytes in md4c.c in md4c 0.4.5 allows attackers to trigger use of uninitialized memory, and cause a denial of service (e.g., assertion failure) via a malformed Markdown document.

mity/md4c

C Markdown parser. Fast. SAX-like interface. Compliant to CommonMark specification.

GitHub

1.33K