CVE-2026-35201

Discount is an implementation of John Gruber's Markdown in C (rdiscount). A signed length truncation bug in the default Markdown parse path affects inputs from 1.3.1.1 up to before 2.2.7.4, enabling an out-of-bounds read and potentially crashing the process. The vulnerability arises when input le...