Buffer Overflow Vulnerability in Discount Markdown Parser by RDiscount

CVE-2026-35201

What is CVE-2026-35201?

The vulnerable Discount Markdown parser, implemented in C, is affected by a signed length truncation bug that leads to an out-of-bounds read. This flaw occurs when inputs exceed the INT_MAX size and are improperly truncated, allowing the parser to access memory beyond the allocated buffer. As a result, this can crash the application, compromising its stability. The issue has been resolved in version 2.2.7.4, making it imperative for users of earlier versions to upgrade.

References