PatchSiren

davidfstr CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM davidfstr CVE published 2026-04-06

CVE-2026-35201

CVE-2026-35201 is a MEDIUM severity vulnerability in Rdiscount, a Markdown parser in C. A signed length truncation bug causes an out-of-bounds read in the default Markdown parse path. Inputs larger than INT_MAX are truncated to a signed int before entering the native parser, allowing the parser to read past the end of the supplied buffer and crash the process. This vulnerability is fixed in version 2.2.7. [truncated]