4.3
CVSSv2

CVE-2021-30027

Published: 29/04/2021 Updated: 09/05/2021
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

md_analyze_line in md4c.c in md4c 0.4.7 allows malicious users to trigger use of uninitialized memory, and cause a denial of service via a malformed Markdown document.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

Vendor Advisories

Debian Bug report logs - #987799 md4c: CVE-2021-30027 Package: src:md4c; Maintainer for src:md4c is Debian Qt/KDE Maintainers <debian-qt-kde@listsdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 29 Apr 2021 20:48:01 UTC Severity: important Tags: security, upstream Found in version md4c/ ...
md_analyze_line in md4cc in md4c 047 allows attackers to trigger use of uninitialized memory, and cause a denial of service via a malformed Markdown document ...