Lucene search
+L

14 matches found

Github Security Blog
Github Security Blog
added 2026/09/17 2:52 p.m.13 views

Wire: Unauthenticated decoder crash via 32-bit length integer overflow in ByteArrayProtoReader32 (incomplete fix of CVE-2026-45799)

Wire's protobuf decoders did not consistently validate attacker-controlled length-delimited sizes against the current reader bounds before computing cursor, limit, or pointer positions. In the Kotlin runtime, ProtoAdapter.decodeByteArray and ProtoAdapter.decodeByteString use the ProtoReader32 fas...

7.5CVSS0.00682EPSS
SaveExploits1References8Affected Software1
Rows per page
Query Builder