A vulnerability was determined in 92181 markdown up to 058cab0cb7fb245a0ccc6b8446963ff8d573558f. Affected by this issue is the function lds of the file md.c. Executing a manipulation can lead to out-of-bounds read.
The attack can be executed remotely. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. This patch is called c000d2f9cf390c315378d3717cf20911cf3e80a6.
A patch should be applied to remediate this issue.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Attack Requirements
None
No additional conditions
Privileges Required
None
No privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
Low
Partial data leak
Integrity
Low
Partial data modification
Availability
Low
Partial disruption
CVSS Vector v4.0
Weakness Type (CWE)
References 8
https://github.com/92181/markdown/
cna@vuldb.com
https://github.com/92181/markdown/commit/c000d2f9cf390c315378d3717cf20911cf3e80…
cna@vuldb.com
https://github.com/92181/markdown/issues/1
cna@vuldb.com
https://github.com/92181/markdown/pull/2
cna@vuldb.com
https://vuldb.com/cve/CVE-2026-86303
cna@vuldb.com
https://vuldb.com/submit/907499
cna@vuldb.com
https://vuldb.com/vuln/399467
cna@vuldb.com
https://vuldb.com/vuln/399467/cti
cna@vuldb.com