CyberSecBulletin

Md2roff Project vulnerabilities

We track 2 vulnerabilities in Md2roff Project products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 21, 2022.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest Md2roff Project vulnerabilities

  • 9.8 Critical severity

    Md2roff: Out-of-bounds Write

    CVE-2022-41220Md2roff ProjectEPSS 2.06%

    md2roff 1.9 has a stack-based buffer overflow via a Markdown file, a different vulnerability than CVE-2022-34913. NOTE: the vendor's position is that the product is not intended for untrusted input

  • 9.8 Critical severity

    Md2roff: Out-of-bounds Write

    CVE-2022-34913Md2roff ProjectEPSS 2.9%

    md2roff 1.7 has a stack-based buffer overflow via a Markdown file containing a large number of consecutive characters to be processed. NOTE: the vendor's position is that the product is not intended for untrusted input