{
  "cveId": "CVE-2024-22051",
  "url": "https://patchblox.com/security/cve/CVE-2024-22051",
  "summary": "CVE-2024-22051 is fixed in ruby-commonmarker on 1 platform, first by DEBIAN-CVE-2024-22051, released January 4, 2024. It is not reported as exploited. Patch Radar priority: Urgent.",
  "title": "ruby-commonmarker: CommonMarker versions prior to 0.23.4 are at risk of an integer overflow vulnerability",
  "description": "CommonMarker versions prior to 0.23.4 are at risk of an integer overflow vulnerability. This vulnerability can result in possibly unauthenticated remote attackers to cause heap memory corruption, potentially leading to an information leak or remote code execution, via parsing tables with marker rows that contain more than UINT16_MAX columns.",
  "published": "2024-01-04T21:15:10Z",
  "severity": "critical",
  "cvss": 9.8,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.0145,
  "epssPercentile": 0.73544,
  "priority": "Urgent",
  "priorityTier": 2,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "ruby-commonmarker",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "0.23.4-1",
      "fix": "DEBIAN-CVE-2024-22051",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-22051",
      "released": "2024-01-04T21:15:10Z"
    },
    {
      "platform": "linux",
      "product": "ruby-commonmarker",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "0.23.4-1",
      "fix": "DEBIAN-CVE-2024-22051",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-22051",
      "released": "2024-01-04T21:15:10Z"
    },
    {
      "platform": "linux",
      "product": "ruby-commonmarker",
      "release": "Debian 14",
      "fixedVersion": "0.23.4-1",
      "fix": "DEBIAN-CVE-2024-22051",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-22051",
      "released": "2024-01-04T21:15:10Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T07:25:28Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}