9.8
CVSSv3

CVE-2024-22051

Published: 04/01/2024 Updated: 11/01/2024
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

CommonMarker versions before 0.23.4 are at risk of an integer overflow vulnerability. This vulnerability can result in possibly unauthenticated remote malicious users to cause heap memory corruption, potentially leading to an information leak or remote code execution, via parsing tables with marker rows that contain more than UINT16_MAX columns.

Vulnerable Product Search on Vulmon Subscribe to Product

github cmark-gfm

gjtorikian commonmarker

Vendor Advisories

Description<!----> This CVE is under investigation by Red Hat Product Security ...