CVE-2026-88753

A flaw was found in markdown2. In the extractmetadata function, an inefficient regular expression used to parse document metadata can take an exponential amount of time to process. An attacker can exploit this vulnerability by providing a crafted Markdown document, causing excessive resource...

EUVD-2026-102186

A Regular-Expression Denial of Service ReDoS in the Markdown2. extractmetadata function lib/markdown2.py of trentm markdown2 through v2.5.5 allows attackers to cause a Denial of Service DoS via a crafted Markdown document...

CVE-2026-88753

The trentm markdown2 library (through version v2.5.5 ) is vulnerable to a Regular-Expression Denial of Service (ReDoS) . The flaw exists within the extract_metadata() function located in the lib/markdown2.py file. An attacker can exploit this by providing a crafted Markdown document to trigger a ...

Memory corruption

In extractmetadata of dm-android-verity.c, there is a possible way to corrupt kernel memory due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...