Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
cmark-gfm out-of-bounds read in validate_protocol
Vulnerability Description
cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. In versions prior 0.29.0.gfm.7, a crafted markdown document can trigger an out-of-bounds read in the `validate_protocol` function. We believe this bug is harmless in practice, because the out-of-bounds read accesses `malloc` metadata without causing any visible damage.This vulnerability has been patched in 0.29.0.gfm.7.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
跨界内存读
Vulnerability Title
cmark-gfm 缓冲区错误漏洞
Vulnerability Description
cmark-gfm是CommonMark的 C 参考实现的扩展版本，是带有规范的 Markdown 语法的合理化版本。 cmark-gfm 0.29.0.gfm.7之前版本存在缓冲区错误漏洞。攻击者利用该漏洞越界读取访问“malloc”元数据。
CVSS Information
N/A
Vulnerability Type
N/A