Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/09/23 6:45 p.m.3 views

Wire Swift runtime: negative LENGTH_DELIMITED length in skipGroup() crashes any protobuf-decoding service

Summary Wire's Swift runtime Wire SPM/CocoaPods product, implemented by wire-runtime-swift did not reject a negative LENGTHDELIMITED field length while skipping an unknown protobuf group. A crafted 10-byte protobuf payload could cause ProtoReader.skipGroup to read a length-delimited field whose...

7.5CVSS5.7AI score0.00546EPSS
SaveExploits1References7Affected Software1
Rows per page
Query Builder