Lucene search

K
osvGoogleOSV:GHSA-2XPJ-F5G2-8P7M
HistoryApr 20, 2021 - 4:30 p.m.

Asyncpg Arbitrary Code Execution Via Access to an Uninitialized Pointer

2021-04-2016:30:51
Google
osv.dev
8

9.4 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.6%

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code (on a database client) via a crafted server response, because of access to an uninitialized pointer in the array data decoder.

9.4 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.6%