10 matches found
CVE-2026-54270 protobufjs: Memory amplification from preserved unknown fields in binary decode
protobufjs compiles protobuf definitions into JavaScript JS functions. From 8.2.0 to 8.4.2, protobufjs preserved unknown wire elements in message.$unknowns and did not provide a decode-time option to discard unknown fields before retaining them. A crafted protobuf payload containing many unknown...
CVE-2026-54270 protobufjs: Memory amplification from preserved unknown fields in binary decode
protobufjs compiles protobuf definitions into JavaScript JS functions. From 8.2.0 to 8.4.2, protobufjs preserved unknown wire elements in message.$unknowns and did not provide a decode-time option to discard unknown fields before retaining them. A crafted protobuf payload containing many unknown...
protobufjs: Memory amplification from preserved unknown fields in binary decode
Summary protobufjs 8.2.0 added support for preserving unknown fields encountered during binary decode. Affected versions preserved unknown wire elements in message.$unknowns and did not provide a decode-time option to discard unknown fields before retaining them. A crafted protobuf payload...
NPM: protobufjs: Memory amplification from preserved unknown fields in binary decode
NPM: protobufjs: Memory amplification from preserved unknown fields in binary decode vulnerability discovered by ? in WordPress Npm protobufjs versions = 8.2.0, = 8.4.2...
Linux Distros Unpatched Vulnerability : CVE-2024-53429
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Open62541 v1.4.6 is has an assertion failure in fuzzbinarydecode, which leads to a crash. CVE-2024-53429 Note that Nessus relies on the presence of the package ...
DEBIAN-CVE-2024-53429
Open62541 v1.4.6 is has an assertion failure in fuzzbinarydecode, which leads to a crash...
UBUNTU-CVE-2024-53429
Open62541 v1.4.6 is has an assertion failure in fuzzbinarydecode, which leads to a crash...
PT-2024-35737
Name of the Vulnerable Software and Affected Versions Open62541 version 1.4.6 Description The issue is related to an assertion failure in the fuzz binary decode function, which can cause a crash. Recommendations For Open62541 version 1.4.6, consider disabling the fuzz binary decode function as a...
Open62541 security vulnerabilities
Open62541 is an open source implementation of OPC UA OPC Unified Architecture by Open62541 Open Source. A security vulnerability exists in Open62541 version 1.4.6, which stems from an assertion failure in fuzzbinarydecode that causes a crash...
