MAL-2025-34913 Malicious code in test-mlw2-awner-bisks (npm)

The package test-mlw2-awner-bisks was found to contain malicious code...

CVE-2022-34913

md2roff 1.7 has a stack-based buffer overflow via a Markdown file containing a large number of consecutive characters to be processed. NOTE: the vendor's position is that the product is not intended for untrusted input...

CVE-2021-34913

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

Exploit for Out-of-bounds Write in Md2Roff_Project Md2Roff

Description of CVE-2022-34913 md2roff 1.7 suffers from a stac...

Stack overflow

DISPUTED md2roff 1.9 has a stack-based buffer overflow via a Markdown file, a different vulnerability than CVE-2022-34913. NOTE: the vendor's position is that the product is not intended for untrusted input...

CVE-2022-34913

CVE-2022-34913 concerns the Markdown processor md2roff, specifically version 1.7. The Red Hat and related sources describe a stack-based buffer overflow when parsing a Markdown file containing a large sequence of consecutive characters, with the vulnerability tied to the code path in md2roff.c (n...

CVE-2021-34913

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34913

Bentley View 10.15.0.75 is affected by CVE-2021-34913 due to a flaw in JT file parsing that can trigger a read past the end of an allocated buffer, enabling remote code execution. The vulnerability requires user interaction (the target must open a malicious JT file or visit a crafted page). Multi...

CVE-2025-34913

CVE-2025-34913 is rejected/not used and does not represent an active vulnerability entry.