📦 Md4c

CVE-2018-11546 is a heap-based buffer over-read vulnerability in md4c 0.2.5 due to an off-by-one error in md_is_named_entity_contents. This allows attackers to read memory beyond allocated buffers, po...

CVE-2020-26148 is a memory corruption vulnerability in md4c, a Markdown parser library. Attackers can trigger use of uninitialized memory via specially crafted Markdown documents, potentially causing ...