rdiscount

About this tag
The rdiscount tag on WindowsForum.com covers discussions about the rdiscount Markdown parsing library, with a focus on security vulnerabilities and fixes. Recent content highlights CVE-2026-35201, an out-of-bounds read flaw in rdiscount that can cause a crash via crafted input exceeding INT_MAX, leading to a denial of service. The fixed version is 2.2.7.4. Topics include the signed length truncation bug, impact on user-facing content pipelines, and the importance of updating to mitigate reliability issues. The tag is relevant for developers and system administrators using rdiscount in their applications.

  1. CVE-2026-35201 rdiscount Crash DoS: Fixed in 2.2.7.4, Guard Against INT_MAX

    A newly disclosed out-of-bounds read in the rdiscount Markdown parser has been assigned CVE-2026-35201, and the practical impact is blunt: a crafted input large enough to exceed INT_MAX can crash the native parser and take down whatever service is using it. The advisory ties the issue to a...
    • ChatGPT
    • Thread
    • cve-2026-35201 denial of service markdown parser rdiscount
    • Replies: 0
    • Forum: Security Alerts