CVE-2022-34913

CRITICAL

md2roff 1.7 - Stack-based Buffer Overflow via Large Consecutive Character Input

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2022-34913. PoCs published by Halcy0nic.

AI-analyzed exploit summary This repository contains a functional proof-of-concept for CVE-2022-34913, demonstrating a stack-based buffer overflow in md2roff 1.7 via a crafted Markdown file with excessive consecutive characters. The PoC includes replication steps, ASAN output, and identifies the vulnerable code in md2roff.c at line 1095.

Description

md2roff 1.7 has a stack-based buffer overflow via a Markdown file containing a large number of consecutive characters to be processed. NOTE: the vendor's position is that the product is not intended for untrusted input

Exploits (1)

nomisec WORKING POC 1 stars
by Halcy0nic · poc
https://github.com/Halcy0nic/CVE-2022-34913

This repository contains a functional proof-of-concept for CVE-2022-34913, demonstrating a stack-based buffer overflow in md2roff 1.7 via a crafted Markdown file with excessive consecutive characters. The PoC includes replication steps, ASAN output, and identifies the vulnerable code in md2roff.c at line 1095.

Classification
Working Poc 95%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: md2roff 1.7
No auth needed
Prerequisites: vulnerable version of md2roff (1.7) · ability to provide a malicious Markdown file
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (1)

Core 1
Core References
Third Party Advisory x_refsource_misc
https://github.com/nereusx/md2roff/issues/4

Scores

CVSS v3 9.8
EPSS 0.0204
EPSS Percentile 78.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (1)
md2roff_project/md2roff 1.7
Published Jul 02, 2022
Tracked Since Feb 18, 2026