md4c before 0.2.5 has a heap-based buffer overflow because md_split_simple_pairing_mark mishandles splits.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV