Integer Overflow

2024-01-0508:01:10

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

commonmarker

integer overflow

vulnerability

remote access

table parsing

heap memory corruption

information leak

arbitrary code execution

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

0.004

Percentile

74.4%

JSON

commonmarker is vulnerable to Integer Overflow . This vulnerability is due to unauthenticated remote access when parsing tables who’s marker rows contain more than UINT16_MAX columns. This allows the remote attackers to cause heap memory corruption which ranges from Information Leak to Arbitrary Code Execution.