CVE-2020-28371

2020-11-0922:15:13

Google

osv.dev

7.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.0%

JSON

An issue was discovered in ReadyTalk Avian 1.2.0 before 2020-10-27. The FileOutputStream.write() method in FileOutputStream.java has a boundary check to prevent out-of-bounds memory read/write operations. However, an integer overflow leads to bypassing this check and achieving the out-of-bounds access. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

CPENameOperatorVersion
avianeq1.1
avianeq0.3
avianeq1.0
avianeq1.0.1
avianeq0.5
avianeq0.4
avianeq0.0.1
avianeq1.2.0
avianeq0.7
avianeq0.7.1

Name	Operator	Version
avian	eq	1.1
avian	eq	0.3
avian	eq	1.0
avian	eq	1.0.1
avian	eq	0.5
avian	eq	0.4
avian	eq	0.0.1
avian	eq	1.2.0
avian	eq	0.7
avian	eq	0.7.1

Rows per page:

1-10 of 151

References

github.com/ReadyTalk/avian/commit/0871979b298add320ca63f65060acb7532c8a0dd

github.com/ReadyTalk/avian/pull/572