Description
md4c 0.2.5 has a heap-based buffer overflow in md_merge_lines because md_is_link_label mishandles the case of a link label composed solely of backslash escapes.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2018-3572 | md4c 0.2.5 has a heap-based buffer overflow in md_merge_lines because md_is_link_label mishandles the case of a link label composed solely of backslash escapes. |
References
| Link | Providers |
|---|---|
| https://github.com/mity/md4c/issues/39 |
|
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-09-16T23:01:45.854Z
Reserved: 2018-05-29T00:00:00.000Z
Link: CVE-2018-11545
No data.
Status : Modified
Published: 2018-05-29T21:29:00.317
Modified: 2024-11-21T03:43:34.997
Link: CVE-2018-11545
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD