CVE-2022-34913: MD2ROFF Project MD2ROFF

Critical severity, CVSS 9.8. EPSS: 2.9% chance of exploitation in the next 30 days.

md2roff 1.7 has a stack-based buffer overflow via a Markdown file containing a large number of consecutive characters to be processed. NOTE: the vendor's position is that the product is not intended for untrusted input

Affected products

Published 2022-07-02. Last modified 2026-06-17.