CVE-2024-22051
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk70th percentile - higher than 70% of all known CVEs
Summary
CommonMarker versions prior to 0.23.4 are vulnerable to an integer overflow. This can allow unauthenticated remote attackers to cause heap memory corruption, potentially leading to information disclosure or remote code execution, by parsing tables with marker rows containing more than UINT16_MAX columns.
Risk Assessment
The risk includes potential remote code execution or information leakage by an unauthenticated attacker, which could compromise system integrity and confidentiality.
Recommendation
It is recommended to immediately upgrade CommonMarker to version 0.23.4 or later to mitigate the integer overflow vulnerability.
Original NVD description (English source)
CommonMarker versions prior to 0.23.4 are at risk of an integer overflow vulnerability. This vulnerability can result in possibly unauthenticated remote attackers to cause heap memory corruption, potentially leading to an information leak or remote code execution, via parsing tables with marker rows that contain more than UINT16_MAX columns.