CVE-2020-26148

md_push_block_bytes in md4c.c in md4c 0.4.5 allows attackers to trigger use of uninitialized memory, and cause a denial of service (e.g., assertion failure)…

published September 29, 2020

CVSS
—
EPSS
1%
Percentile
72.7
In the wild
Unconfirmed
What it is

md_push_block_bytes in md4c.c in md4c 0.4.5 allows attackers to trigger use of uninitialized memory, and cause a denial of service (e.g., assertion failure) via a malformed Markdown document.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01423 · 72.7th percentile
Published
2020-09-29T18:48Z
EPSS history
Timeline
  • 29 SEP 18:48Z
    md_push_block_bytes in md4c.c in md4c 0.4.5 allows attackers to trigger use of uninitialized memory, and cause a denial of service (e.g., assertion failure)…
    cvelistv5