CVE-2018-11536

CVE-2018-11536 affects the md4c Markdown parser in versions before 0.2.5. The issue is a heap-based buffer overflow caused by improper handling of splits in the md_split_simple_pairing_mark function. Documented impacts include denial of service or potential arbitrary code execution, but exploitat...

CVE-2018-11536

md4c before 0.2.5 has a heap-based buffer overflow because mdsplitsimplepairingmark mishandles splits...

CVE-2018-11536

md4c before 0.2.5 has a heap-based buffer overflow because mdsplitsimplepairingmark mishandles splits...

md4c buffer overflow vulnerability

md4c is a C-based Markdown a markup language parser . A buffer overflow vulnerability exists in the 'mdsplitsimplepairingmark' function in versions of md4c prior to 0.2.5. An attacker could exploit this vulnerability to cause a denial of service or execute arbitrary code...

CVE-2018-11545: Out-of-bounds Write

md4c 0.2.5 has a heap-based buffer overflow in mdmergelines because mdislinklabel mishandles the case of a link label composed solely of backslash escapes...

CVE-2018-11546: Out-of-bounds Read

md4c 0.2.5 has a heap-based buffer over-read because mdisnamedentitycontents has an off-by-one error...

PT-2018-10644

Name of the Vulnerable Software and Affected Versions md4c versions prior to 0.2.5 Description The issue is caused by a heap-based buffer overflow in the md split simple pairing mark function, which mishandles splits. Recommendations For versions prior to 0.2.5, update to version 0.2.5 or later t...

PT-2018-10654

Name of the Vulnerable Software and Affected Versions md4c version 0.2.5 Description The issue arises from a heap-based buffer over-read in the md is link reference definition helper function within md4c. This occurs due to md is link label mishandling loop termination, leading to improper handli...

PT-2018-10652

Name of the Vulnerable Software and Affected Versions md4c version 0.2.5 Description The issue is related to a heap-based buffer overflow in the md merge lines function. This overflow occurs because the md is link label function mishandles link labels composed solely of backslash escapes...

PT-2018-10653

Name of the Vulnerable Software and Affected Versions md4c version 0.2.5 Description The issue is caused by a heap-based buffer over-read due to an off-by-one error in the md is named entity contents function. Recommendations For md4c version 0.2.5, at the moment, there is no information about a...

CVE-2018-11536: Out-of-bounds Write

md4c before 0.2.5 has a heap-based buffer overflow because mdsplitsimplepairingmark mishandles splits...

CVE-2018-11547: Out-of-bounds Read

mdislinkreferencedefinitionhelper in md4c 0.2.5 has a heap-based buffer over-read because mdislinklabel mishandles loop termination...