CVE-2026-35201
Discount has an Out-of-bounds Read in rdiscount
MEDIUM 5.9EPSS 0.4%
Discount is an implementation of John Gruber's Markdown markup language in C. From 1.3.1.1 to before 2.2.7.4, a signed length truncation bug causes an out-of-bounds read in the default Markdown parse path. Inputs larger than INT_MAX are truncated to a signed int before entering the native parser, allowing the parser to read past the end of the supplied buffer and crash the process. This vulnerability is fixed in 2.2.7.4.
- Affected
- davidfstr · rdiscount
- CVSS v3.1 GITHUB
- 5.9 MEDIUM
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- 0.39% chance of exploitation in the next 30 days, 31st percentile
- Published
- 2026-04-06
- Updated
- 2026-04-07