CVE-2024-22051

CommonMarker versions prior to 0.23.4 are at risk of an integer overflow vulnerability. This vulnerability can result in possibly unauthenticated remote attackers to cause heap memory corruption, potentially leading to an information leak or remote code execution, via parsing tables with marker rows that contain more than UINT16_MAX columns.

• CWE-190
• CWE-190

• https://github.com/advisories/GHSA-fmx4-26r3-wxpfThird Party Advisory
• https://github.com/github/cmark-gfm/security/advisories/GHSA-mc3g-88wq-6f4xNot Applicable
• https://github.com/gjtorikian/commonmarker/commit/ab4504fd17460627a6ab255bc3c63e8e5fc6aed3Patch
• https://github.com/gjtorikian/commonmarker/security/advisories/GHSA-fmx4-26r3-wxpfVendor Advisory
• https://vulncheck.com/advisories/vc-advisory-GHSA-fmx4-26r3-wxpfThird Party Advisory
• https://github.com/advisories/GHSA-fmx4-26r3-wxpfThird Party Advisory
• https://github.com/github/cmark-gfm/security/advisories/GHSA-mc3g-88wq-6f4xNot Applicable
• https://github.com/gjtorikian/commonmarker/commit/ab4504fd17460627a6ab255bc3c63e8e5fc6aed3Patch
• https://github.com/gjtorikian/commonmarker/security/advisories/GHSA-fmx4-26r3-wxpfVendor Advisory
• https://vulncheck.com/advisories/vc-advisory-GHSA-fmx4-26r3-wxpfThird Party Advisory

Published

Jan 4, 2024

Last Modified

Jul 14, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-22044A vulnerability has been identified in SENTRON 3KC ATC6 Expa…7.5
• CVE-2024-22045A vulnerability has been identified in SINEMA Remote Connect…6.5
• CVE-2024-22047A race condition exists in Audited 4.0.0 to 5.3.3 that can r…3.1
• CVE-2024-22048govuk_tech_docs versions from 2.0.2 to before 3.3.1 are vuln…6.1
• CVE-2024-22049httparty before 0.21.0 is vulnerable to an assumed-immutable…5.3
• CVE-2024-22050Path traversal in the static file service in Iodine less tha…7.5
• CVE-2024-22052A null pointer dereference vulnerability in IPSec component …7.5
• CVE-2024-22053A heap overflow vulnerability in IPSec component of Ivanti C…8.2
• CVE-2024-22054A malformed discovery packet sent by a malicious actor with …7.5
• CVE-2024-22058A buffer overflow allows a low privilege user on the local m…7.8
• CVE-2024-22059A SQL injection vulnerability in web component of Ivanti Neu…8.8
• CVE-2024-2206An SSRF vulnerability exists in the gradio-app/gradio due to…6.5