Denial Of Service (DoS)

google.golang.org/protobuf is vulnerable to Denial Of Service DoS. The vulnerability exists due to the parseNumber function in decodenumber.go, which allows an attacker to cause an application crash by parsing a message starting with a number, then whitespace, then minus, then whitespace, such as...

OSV-2018-68 Heap-buffer-overflow in read_bits_16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12817 Crash type: Heap-buffer-overflow READ 1 Crash state: readbits16 decodenumber parsetables...