CVE-2018-12112

mdbuildattribute in md4c.c in md4c 0.2.6 allows remote attackers to cause a denial of service Segmentation fault and application crash or possibly have unspecified other impact via a crafted file...

CVE-2018-12112

The vulnerability CVE-2018-12112 affects md4c 0.2.6. Root cause: the function md_build_attribute in md4c.c allows a crafted file to trigger a denial of service (segmentation fault and application crash) and possibly other impact. Impact is a crash/DoS; exploitation is remote via crafted input. No...

CVE-2018-12112

mdbuildattribute in md4c.c in md4c 0.2.6 allows remote attackers to cause a denial of service Segmentation fault and application crash or possibly have unspecified other impact via a crafted file...

Null pointer dereference

md4c 0.2.6 has a NULL pointer dereference in the function mdprocessline in md4c.c, related to ctx-currentblock...

CVE-2018-12102

md4c 0.2.6 has a NULL pointer dereference in the function mdprocessline in md4c.c, related to ctx-currentblock...

CVE-2018-12102

md4c 0.2.6 has a NULL pointer dereference in the function mdprocessline in md4c.c, related to ctx-currentblock...

CVE-2018-12102

CVE-2018-12102 affects md4c 0.2.6 with a NULL pointer dereference in md_process_line (md4c.c), related to ctx->current_block. Multiple sources corroborate this vulnerability across CVE records and CNVD/OSV-type entries. The CNVD-2018-21058 description explicitly notes that an attacker can caus...

Heap overflow

md4c 0.2.5 has a heap-based buffer overflow in mdmergelines because mdislinklabel mishandles the case of a link label composed solely of backslash escapes...

Heap overflow

md4c 0.2.5 has a heap-based buffer over-read because mdisnamedentitycontents has an off-by-one error...

CVE-2018-11545

md4c 0.2.5 has a heap-based buffer overflow in mdmergelines because mdislinklabel mishandles the case of a link label composed solely of backslash escapes...

CVE-2018-11546

md4c 0.2.5 has a heap-based buffer over-read because mdisnamedentitycontents has an off-by-one error...

CVE-2018-11547

mdislinkreferencedefinitionhelper in md4c 0.2.5 has a heap-based buffer over-read because mdislinklabel mishandles loop termination...

CVE-2018-11547

mdislinkreferencedefinitionhelper in md4c 0.2.5 has a heap-based buffer over-read because mdislinklabel mishandles loop termination...

CVE-2018-11546

md4c 0.2.5 has a heap-based buffer over-read because mdisnamedentitycontents has an off-by-one error...

CVE-2018-11545

md4c 0.2.5 has a heap-based buffer overflow in mdmergelines because mdislinklabel mishandles the case of a link label composed solely of backslash escapes...

CVE-2018-11547

mdislinkreferencedefinitionhelper in md4c 0.2.5 has a heap-based buffer over-read because mdislinklabel mishandles loop termination...

CVE-2018-11546

CVE-2018-11546 affects md4c 0.2.5 and is due to a heap-based buffer over-read caused by an off-by-one in md_is_named_entity_contents. The issue is documented across multiple sources (e.g., NVD/N-Red Hat/CNVD) as a vulnerability in md4c 0.2.5, with high to critical impact (network-exposed, partial...

CVE-2018-11547

The CVE refers to md4c 0.2.5, where the function md_is_link_reference_definition_helper suffers a heap-based buffer over-read due to improper termination of the md_is_link_label loop. This vulnerability is documented across multiple feeds (NVD, Red Hat, CNVD, OSV, etc.). Impact and remediation de...

CVE-2018-11546

md4c 0.2.5 has a heap-based buffer over-read because mdisnamedentitycontents has an off-by-one error...

CVE-2018-11545

The CVE-2018-11545 vulnerability affects md4c 0.2.5, a C-based Markdown parser. A heap-based buffer overflow occurs in md_merge_lines when md_is_link_label mishandles link labels composed solely of backslash escapes. This is the concrete flaw described across multiple sources (CNVD, NVD, Red Hat,...