Lucene search
+L

5 matches found

OSV
OSV
added 2026/07/16 3:57 p.m.7 views

CVE-2026-55407 Buffa: Memory Exhaustion Denial of Service in decode_unknown_field via Unbounded Allocation

Buffa is a pure-Rust Protocol Buffers implementation with first-class protobuf editions support. Prior to 0.8.0, the decodeunknownfield function in buffa's protobuf decoder allocated heap memory in proportion to untrusted input unknown fields in the serialized protobuf without enforcing an...

6.3CVSS6.1AI score0.00423EPSS
SaveExploits0References6
Rows per page
Query Builder