CVE-2026-86303

    Dashboard / Vulnerabilities / CVE-2026-86303

    CVE-2026-86303

    Published: 7 Sept 2026Last Modified: 8 Oct 2026

    Summary: 92181 markdown md.c lds out-of-bounds

    Details: A vulnerability was determined in 92181 markdown up to 058cab0cb7fb245a0ccc6b8446963ff8d573558f. Affected by this issue is the function lds of the file md.c. Executing a manipulation can lead to out-of-bounds read. The attack can be executed remotely. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. This patch is called c000d2f9cf390c315378d3717cf20911cf3e80a6. A patch should be applied to remediate this issue.

    References: https://github.com/92181/markdown/, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/86xxx/CVE-2026-86303.json, https://nvd.nist.gov/vuln/detail/CVE-2026-86303, https://vuldb.com/cve/CVE-2026-86303, https://vuldb.com/submit/907499, https://vuldb.com/vuln/399467, https://github.com/92181/markdown/issues/1, https://vuldb.com/vuln/399467/cti, https://github.com/92181/markdown/commit/c000d2f9cf390c315378d3717cf20911cf3e80a6, https://github.com/92181/markdown/pull/2

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 058cab0cb7fb245a0ccc6b8446963ff8d573558f
    Fixed -None

    Affected versions

    058cab0cb7fb245a0ccc6b8446963ff8d573558f

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2026-86303 | CVE-DB