PT-2021-10470

Name of the Vulnerable Software and Affected Versions: Caret Editor versions prior to 4.0.0-rc22 Description: A specially crafted Markdown document could cause the execution of malicious JavaScript code. Recommendations: For versions prior to 4.0.0-rc22, update to version 4.0.0-rc22 or later to...

CVE-2020-26148

mdpushblockbytes in md4c.c in md4c 0.4.5 allows attackers to trigger use of uninitialized memory, and cause a denial of service e.g., assertion failure via a malformed Markdown document...

Design/Logic Flaw

mdpushblockbytes in md4c.c in md4c 0.4.5 allows attackers to trigger use of uninitialized memory, and cause a denial of service e.g., assertion failure via a malformed Markdown document...

CVE-2020-26148

mdpushblockbytes in md4c.c in md4c 0.4.5 allows attackers to trigger use of uninitialized memory, and cause a denial of service e.g., assertion failure via a malformed Markdown document...

CVE-2020-26148

mdpushblockbytes in md4c.c in md4c 0.4.5 allows attackers to trigger use of uninitialized memory, and cause a denial of service e.g., assertion failure via a malformed Markdown document...

CVE-2020-26148

md4c 0.4.5 contains a vulnerability in md_push_block_bytes (md4c.c) that can trigger use of uninitialized memory and cause a denial of service (e.g., assertion failure) via a malformed Markdown document. Connected sources confirm the defect but do not provide exploit specifics, affected platforms...

CVE-2020-26148

mdpushblockbytes in md4c.c in md4c 0.4.5 allows attackers to trigger use of uninitialized memory, and cause a denial of service e.g., assertion failure via a malformed Markdown document...

CVE-2020-26148: Use of Uninitialized Resource

mdpushblockbytes in md4c.c in md4c 0.4.5 allows attackers to trigger use of uninitialized memory, and cause a denial of service e.g., assertion failure via a malformed Markdown document...