CVE-2020-26243

Nanopb is a small code-size Protocol Buffers implementation. In Nanopb before versions 0.4.4 and 0.3.9.7, decoding specifically formed message can leak memory if dynamic allocation is enabled and an oneof field contains a static submessage that contains a dynamic field, and the message being...

CVE-2020-26243

Nanopb memory-leak in decoding: when dynamic allocation is enabled and a oneof field contains a static submessage with a dynamic field, decoding a message that contains the submessage multiple times can leak memory in versions before 0.4.4 and 0.3.9.7. Fixes are in 0.3.9.7 and 0.4.4. Workarounds ...

PT-2020-16371

Name of the Vulnerable Software and Affected Versions Nanopb versions prior to 0.3.9.7 Nanopb versions prior to 0.4.4 Description Decoding specifically formed messages can leak memory if dynamic allocation is enabled and an oneof field contains a static submessage that contains a dynamic field, a...

nanopb:fuzztest: Heap-buffer-overflow in allocate_field

Project: https://github.com/nanopb/nanopb.git Detailed Report: https://oss-fuzz.com/testcase?key=5646298464911360 Project: nanopb Fuzzing Engine: afl Fuzz Target: fuzztest Job Type: aflasannanopb Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x621000008956 Crash State...

nanopb:fuzztest: Use-of-uninitialized-value in pb_encode_varint

Project: https://github.com/nanopb/nanopb.git Detailed Report: https://oss-fuzz.com/testcase?key=5127522971549696 Project: nanopb Fuzzing Engine: libFuzzer Fuzz Target: fuzztest Job Type: libfuzzermsannanopb Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

nanopb:fuzztest: Heap-buffer-overflow in allocate_field

Project: https://github.com/nanopb/nanopb.git Detailed Report: https://oss-fuzz.com/testcase?key=6271277476872192 Project: nanopb Fuzzing Engine: libFuzzer Fuzz Target: fuzztest Job Type: libfuzzerasannanopb Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x612000000820...

Security Bulletin: A security vulnerability has been identified in nanopb shipped with IBM Watson Machine Learning Community Edition (WMLCE)

Summary The vulnerability CVE-2020-5235 was found in the nanopb package, which is either built in to or distributed with IBM WMLCE. Vulnerability Details CVEID: CVE-2020-5235 DESCRIPTION: Nanopb is vulnerable to a denial of service, caused by a out of memory condition. By persuading a victim to...

Invalid Memory Free

nanopb is vulnerable to invalid freeing of memory. The vulnerability possible when it calls the function free on a pointer value that comes from uninitialized memory and when the following conditions are met: 1. compile with PBENABLEMALLOC and 2. message to be decoded contains a repeated string,...

CVE-2020-5235

There is a potentially exploitable out of memory condition In Nanopb before 0.4.1, 0.3.9.5, and 0.2.9.4. When nanopb is compiled with PBENABLEMALLOC, the message to be decoded contains a repeated string, bytes or message field and realloc runs out of memory when expanding the array nanopb can end...

CVE-2020-5235

There is a potentially exploitable out of memory condition In Nanopb before 0.4.1, 0.3.9.5, and 0.2.9.4. When nanopb is compiled with PBENABLEMALLOC, the message to be decoded contains a repeated string, bytes or message field and realloc runs out of memory when expanding the array nanopb can end...

CVE-2020-5235

There is a potentially exploitable out of memory condition In Nanopb before 0.4.1, 0.3.9.5, and 0.2.9.4. When nanopb is compiled with PBENABLEMALLOC, the message to be decoded contains a repeated string, bytes or message field and realloc runs out of memory when expanding the array nanopb can end...

Memory corruption

There is a potentially exploitable out of memory condition In Nanopb before 0.4.1, 0.3.9.5, and 0.2.9.4. When nanopb is compiled with PBENABLEMALLOC, the message to be decoded contains a repeated string, bytes or message field and realloc runs out of memory when expanding the array nanopb can end...

CVE-2020-5235

CVE-2020-5235 affects the nanopb library. When compiled with PB_ENABLE_MALLOC, decoding a message containing a repeated string/bytes/message field can trigger an out-of-memory condition where realloc() may call free() on memory from uninitialized data, potentially crashing or corrupting memory. A...

CVE-2020-5235

There is a potentially exploitable out of memory condition In Nanopb before 0.4.1, 0.3.9.5, and 0.2.9.4. When nanopb is compiled with PBENABLEMALLOC, the message to be decoded contains a repeated string, bytes or message field and realloc runs out of memory when expanding the array nanopb can end...

CVE-2020-5235 Out-of-memory condition in Nanopb is potentially exploitable

There is a potentially exploitable out of memory condition In Nanopb before 0.4.1, 0.3.9.5, and 0.2.9.4. When nanopb is compiled with PBENABLEMALLOC, the message to be decoded contains a repeated string, bytes or message field and realloc runs out of memory when expanding the array nanopb can end...