Md2roff vulnerabilities

2 known vulnerabilities in Md2roff from Md2roff Project. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Md2roff: Out-of-bounds Write

  CVE-2022-41220Sep 21, 2022Md2roff ProjectEPSS 2.06%

  md2roff 1.9 has a stack-based buffer overflow via a Markdown file, a different vulnerability than CVE-2022-34913. NOTE: the vendor's position is that the product is not intended for untrusted input

• 9.8 Critical severity

  Md2roff: Out-of-bounds Write

  CVE-2022-34913Jul 2, 2022Md2roff ProjectEPSS 2.9%

  md2roff 1.7 has a stack-based buffer overflow via a Markdown file containing a large number of consecutive characters to be processed. NOTE: the vendor's position is that the product is not intended for untrusted input