CVE-2026-86303 PUBLISHED

A vulnerability was determined in 92181 markdown up to 058cab0cb7fb245a0ccc6b8446963ff8d573558f. Affected by this issue is the function lds of the file md.c. Executing a manipulation can lead to out-of-bounds read. The attack can be executed remotely. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. This patch is called c000d2f9cf390c315378d3717cf20911cf3e80a6. A patch should be applied to remediate this issue.

• lrrh (VulDB User) reporter

• VDB-399467 | 92181 markdown md.c lds out-of-bounds
• VDB-399467 | CTI Indicators (IOB, IOC, IOA)
• CVE-2026-86303 | CVE Analysis and Report
• Submit #907499 | github markdown commit 0d1eafb484f4766316a5391e162b4c96dc76513f Out-of-Bounds Read
• https://github.com/92181/markdown/issues/1
• https://github.com/92181/markdown/pull/2
• https://github.com/92181/markdown/commit/c000d2f9cf390c315378d3717cf20911cf3e80a6
• https://github.com/92181/markdown/

• Out-of-Bounds Read CWE
• Memory Corruption CWE