CVE-2018-11547

mdislinkreferencedefinitionhelper in md4c 0.2.5 has a heap-based buffer over-read because mdislinklabel mishandles loop termination...

CVE-2018-11547

The CVE refers to md4c 0.2.5, where the function md_is_link_reference_definition_helper suffers a heap-based buffer over-read due to improper termination of the md_is_link_label loop. This vulnerability is documented across multiple feeds (NVD, Red Hat, CNVD, OSV, etc.). Impact and remediation de...