CVE-2026-86303: 92181 markdown md.c lds out-of-bounds
A vulnerability was determined in 92181 markdown up to 058cab0cb7fb245a0ccc6b8446963ff8d573558f. Affected by this issue is the function lds of the file md.c. Executing a manipulation can lead to out-of-bounds read. The attack can be executed remotely. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. This patch is called c000d2f9cf390c315378d3717cf20911cf3e80a6. A patch should be applied to remediate this issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
92181 markdownto a version that resolves this vulnerability.Patch c000d2f9cf390c315378d3717cf20911cf3e80a6
Event History
Frequently Asked Questions
Which deployments are affected?
Deployments of 92181 markdown containing code up to commit 058cab0cb7fb245a0ccc6b8446963ff8d573558f are affected. Because the project uses a rolling release model, affected and fixed version numbers are not available.
Does exploitation require authentication or user interaction?
No. The supplied severity vector indicates network exploitation with low attack complexity, no privileges required, and no user interaction required.
How can I determine whether my build is vulnerable?
Check the source revision used by your markdown deployment and determine whether it includes patch commit c000d2f9cf390c315378d3717cf20911cf3e80a6. Builds based on code at or before the identified affected commit should be treated as affected unless the patch has been backported.
What should be done if the deployment is affected?
Apply patch c000d2f9cf390c315378d3717cf20911cf3e80a6. The provided data does not identify an alternative mitigation when patching cannot be performed immediately.