CVE-2022-41220: MD2ROFF Project MD2ROFF

Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days.

md2roff 1.9 has a stack-based buffer overflow via a Markdown file, a different vulnerability than CVE-2022-34913. NOTE: the vendor's position is that the product is not intended for untrusted input

Affected products

• MD2ROFF Project MD2ROFF: version 1.9 only

Published 2022-09-21. Last modified 2026-06-17.