CVE-2022-24724

    Dashboard / Vulnerabilities / CVE-2022-24724

    CVE-2022-24724

    Published: 3 Mar 2022Last Modified: 12 Aug 2026

    Summary: Integer overflow in table parsing extension leads to heap memory corruption

    Details: cmark-gfm is GitHub's extended version of the C reference implementation of CommonMark. Prior to versions 0.29.0.gfm.3 and 0.28.3.gfm.21, an integer overflow in cmark-gfm's table row parsing `table.c:row_from_string` may lead to heap memory corruption when parsing tables who's marker rows contain more than UINT16_MAX columns. The impact of this heap corruption ranges from Information Leak to Arbitrary Code Execution depending on how and where `cmark-gfm` is used. If `cmark-gfm` is used for rendering remote user controlled markdown, this vulnerability may lead to Remote Code Execution (RCE) in applications employing affected versions of the `cmark-gfm` library. This vulnerability has been patched in the following cmark-gfm versions 0.29.0.gfm.3 and 0.28.3.gfm.21. A workaround is available. The vulnerability exists in the table markdown extensions of cmark-gfm. Disabling the table extension will prevent this vulnerability from being triggered.

    References: http://packetstormsecurity.com/files/166599/cmark-gfm-Integer-overflow.html, https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24724.json, https://github.com/github/cmark-gfm/security/advisories/GHSA-mc3g-88wq-6f4x, https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5CYUU662VO6CCXQKVZVOHXX3RGIF2DLQ/, https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7V3HAM5H6YFJG2QFEXACZR3XVWFTXTC/, https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KH4UQA6VWVZU5EW3HNEAB7D7BTCNJSJ2/, https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RSKUOJ2VAYGTJXPDE2RRPMNLVVMKCI77/, https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TJBFIJEHJZEEDG6MO4MQHZYKUXELH77O/, https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z55K6VNVKO2G5SNKRCQ2KDG5SKTX5PVV/, https://nvd.nist.gov/vuln/detail/CVE-2022-24724

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -6fc5672293c1052e2fb7ab65a92a41495cb6426a

    Affected versions

    0.28.3.gfm.20
    0.28.3.gfm.19
    0.28.3.gfm.18
    0.28.3.gfm.17
    0.28.3.gfm.16
    0.28.3.gfm.15
    0.28.3.gfm.14
    0.28.3.gfm.13
    0.28.3.gfm.12
    0.28.0.gfm.11
    0.28.0.gfm.10
    0.28.0.gfm.9
    0.28.0.gfm.8
    0.28.0.gfm.7
    0.28.0.gfm.6
    0.28.0.gfm.5

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2022-24724 | CVE-DB