CVE-2021-30027

Published April 29th, 2021

View on NVD ↗

CVSS v3

5.5

MEDIUM

CVSS v2

4.3

MEDIUM

Affected

PROJECT

Description

md_analyze_line in md4c.c in md4c 0.4.7 allows attackers to trigger use of uninitialized memory, and cause a denial of service via a malformed Markdown document.

mity/md4c

C Markdown parser. Fast. SAX-like interface. Compliant to CommonMark specification.

GitHub

1.33K