CVE-2022-41220
CRITICAL 9.8EPSS 2.1%
md2roff 1.9 has a stack-based buffer overflow via a Markdown file, a different vulnerability than CVE-2022-34913. NOTE: the vendor's position is that the product is not intended for untrusted input
- CVSS v3.1 NVD
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- 2.06% chance of exploitation in the next 30 days, 81st percentile
- Published
- 2022-09-21
- Updated
- 2025-04-09
Proof-of-concept exploits (1)
- Halcy0nic/CVE-2022-412201★ · 2023-07-27