Code injection

An issue was discovered in the serdecbor crate before 0.10.2 for Rust. The CBOR deserializer can cause stack consumption via nested semantic tags...

CVE-2019-25001

An issue was discovered in the serdecbor crate before 0.10.2 for Rust. The CBOR deserializer can cause stack consumption via nested semantic tags...

Rust 缓冲区错误漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A buffer overflow vulnerability exists in Rust serdecbor crate versions prior to 0.10.2, which stems from the fact that the CBOR deserializer may cause stack consumption via nested semantic tags. No detailed...

PT-2019-16418

Name of the Vulnerable Software and Affected Versions serde cbor crate versions prior to 0.10.2 Description An issue in the CBOR deserializer can cause stack consumption via nested semantic tags, allowing an attacker to craft small CBOR documents that cause a stack overflow. The flaw was correcte...