EUVD-2026-16078Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
6DescriptionCVE.org
A weakness has been identified in Orc discount up to 3.0.1.2. This issue affects the function compile of the file markdown.c of the component Markdown Handler. This manipulation causes uncontrolled recursion. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks. The project maintainer confirms: "[I]f you feed it an infinitely deep blockquote input it will crash. (...) [T]his is a duplicate of an old bug that I've been working on."
AnalysisAI
Uncontrolled recursion in the Markdown Handler component of Orc discount up to version 3.0.1.2 causes denial of service through malformed deeply-nested blockquote inputs, affecting local users who process untrusted markdown files. Public exploit code exists for this vulnerability, and no patch is currently available. The issue requires local access and low privileges to trigger but can crash the application.
Technical ContextAI
The Orc discount library is a Markdown parser and HTML converter. The vulnerability resides in CWE-674 (Uncontrolled Recursion), a weakness class where input processing triggers recursive function calls without adequate depth limits or termination conditions. Specifically, the markdown.c file's compile function fails to properly bound recursion when parsing nested blockquote syntax in Markdown input. The affected product is identified via CPE cpe:2.3:a:orc:discount:*:*:*:*:*:*:*:* through version 3.0.1.2. When a maliciously crafted Markdown file with infinitely deep or excessively nested blockquotes is parsed, the recursive parsing logic exhausts the stack, leading to a crash. This is a classic stack overflow condition resulting from inadequate input validation and lack of recursion depth guards.
RemediationAI
Users should upgrade to a patched version of Orc discount newer than 3.0.1.2 once available; however, as of the CVE report date, the project maintainer has not released a confirmed fix (the project status shows this as a duplicate of a previously identified but unresolved bug). As a temporary mitigation, enforce input validation and sanitization on Markdown files before processing-specifically, implement recursion depth limits in the parser or reject Markdown documents with nesting levels exceeding a safe threshold. Administrators should restrict local access to systems running discount and monitor for suspicious Markdown file submissions. Monitor the GitHub repository (https://github.com/Orc/discount/issues/305) for patch announcements and apply updates immediately upon release.
The quoteblock function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of s
The __mkd_trim_line function in mkdio.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of
The islist function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of servi
The isfootnote function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of s
Same weakness CWE-674 – Uncontrolled Recursion
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today