2 matches found
CVE-2022-24724
CVE-2022-24724 affects cmark-gfm, GitHub’s extended CommonMark reference implementation. A heap memory overflow in table.c:row_from_string can occur when parsing table rows with more than UINT16_MAX columns, leading to information disclosure or arbitrary code execution depending on usage. Affecte...
CVE-2024-22051
CommonMarker (cmark-gfm) before version 0.23.4 is vulnerable to an integer overflow in table row parsing that can cause heap memory corruption, potentially enabling unauthenticated remote attackers to leak information or execute code when parsing tables with more than UINT16_MAX columns. Affected...