md4c buffer overflow vulnerability (CNVD-2018-15762)

md4c is a C-based Markdown a markup language parser . A buffer overflow vulnerability exists in the 'mdisnamedentitycontents' function in md4c version 0.2.5. An attacker could exploit this vulnerability to cause a heap-based buffer out-of-bounds read...

PT-2018-10653

Name of the Vulnerable Software and Affected Versions md4c version 0.2.5 Description The issue is caused by a heap-based buffer over-read due to an off-by-one error in the md is named entity contents function. Recommendations For md4c version 0.2.5, at the moment, there is no information about a...