Lucene search
+L

1 matches found

OSV
OSV
added 2023/12/08 3:23 p.m.141 views

GHSA-7787-P7X6-FQ3J Candid infinite decoding loop through specially crafted payload

Impact The Candid library causes a Denial of Service while parsing a specially crafted payload with empty data type. For example, if the payload is record ; empty and the canister interface expects record then the rust candid decoder treats empty as an extra field required by the type. The proble...

7.5CVSS7.5AI score0.01212EPSS
SaveExploits0References9
Rows per page
Query Builder