1 matches found
cbor2 C extension decoder flaws can cause denial of service
Multiple vulnerabilities exist in cbor2 through version 5.7.0 in the decodedefinitelongstring function of the C extension decoder source/decoder.c: 1. Integer Underflow Leading to Out-of-Bounds Read CWE-191, CWE-125: An incorrect variable reference and missing state reset in the chunk processing...
7.5CVSS5.9AI score0.0046EPSS
SaveExploits1References7Affected Software1
20