Vulnerability · Published Sep 7, 2026 · Assigned by VulDB

CVE-2026-8630392181 markdown md.c lds out-of-bounds

High 7.3

In plain English

A high-severity out-of-bounds read in markdown from 92181. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 46% of all known vulnerabilities).

Severity (CVSS 3.1)7.3High

Exploit odds (30 days)0.5%top 54.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was determined in 92181 markdown up to 058cab0cb7fb245a0ccc6b8446963ff8d573558f. Affected by this issue is the function lds of the file md.c. Executing a manipulation can lead to out-of-bounds read. The attack can be executed remotely. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. This patch is called c000d2f9cf390c315378d3717cf20911cf3e80a6. A patch should be applied to remediate this issue.

Affected products (as reported)

Vendor	Product	Versions
92181	markdown	058cab0cb7fb245a0ccc6b8446963ff8d573558f

Weakness: CWE-125, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C

References

VDB-399467 | 92181 markdown md.c lds out-of-bounds vdb-entry, technical-description
VDB-399467 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
CVE-2026-86303 | CVE Analysis and Report third-party-advisory
Submit #907499 | github markdown commit 0d1eafb484f4766316a5391e162b4c96dc76513f Out-of-Bounds Read third-party-advisory
https://github.com/92181/markdown/issues/1 issue-tracking
https://github.com/92181/markdown/pull/2 issue-tracking, patch
https://github.com/92181/markdown/commit/c000d2f9cf390c315378d3717cf20911cf3e80a6 patch
https://github.com/92181/markdown/ product