CVE-2023-31194

Vulnerability

Diagon v1.0.139 contains an improper array index validation vulnerability in the GraphPlanar::Write function. A specially crafted markdown file can trigger out-of-bounds memory access when processing planar graph representations. The vulnerability is present in version 1.0.139 as confirmed by Talos [1].

Exploitation

Exploitation requires a victim to open a malicious markdown file using Diagon. No prior authentication or special privileges are needed. The attacker crafts a markdown input that, when parsed and rendered by GraphPlanar::Write, causes an invalid array index access, leading to memory corruption [1].

Impact

Successful exploitation can result in memory corruption, potentially leading to denial of service or arbitrary code execution in the context of the Diagon process. The CVSSv3 score is 5.3 (AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L), indicating low impact on confidentiality, integrity, and availability [1].

Mitigation

As of the publication date (2023-07-05), no patched version has been released. Users are advised to avoid opening untrusted markdown files with Diagon until a fix is available [1].