CVE-2026-35201

CVE-2026-35201

Discount is an implementation of John Gruber's Markdown markup language in C. From 1.3.1.1 to before 2.2.7.4, a signed length truncation bug causes an out-of-bounds read in the default Markdown parse path. Inputs larger than INT_MAX are truncated to a signed int before entering the native parser, allowing the parser to read past the end of the supplied buffer and crash the process. This vulnerability is fixed in 2.2.7.4.

CVE-2026-35201

Discount is an implementation of John Gruber's Markdown markup language in C. From 1.3.1.1 to before 2.2.7.4, a signed length truncation bug causes an out-of-bounds read in the default Markdown parse path. Inputs larger than INT_MAX are truncated to a signed int before entering the native parser, allowing the parser to read past the end of the supplied buffer and crash the process. This vulnerability is fixed in 2.2.7.4.

CVE-2026-35201

Discount is an implementation of John Gruber's Markdown markup languag ...

GHSA-6r34-94wq-jhrc

rdiscount has an Out-of-bounds Read

BDU:2026-09701

Уязвимость конвертера документов в синтаксисе Markdown в HTML RDiscount, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю вызвать отказ в обслуживании