CVE-2024-53984

Nanopb is a small code-size Protocol Buffers implementation. When the compile time option PBENABLEMALLOC is enabled, the message contains at least one field with FTPOINTER field type, custom stream callback is used with unknown stream length. and the pbdecodeex function is used with flag...

CVE-2024-53984: Missing Release of Memory after Effective Lifetime

Nanopb is a small code-size Protocol Buffers implementation. When the compile time option PBENABLEMALLOC is enabled, the message contains at least one field with FTPOINTER field type, custom stream callback is used with unknown stream length. and the pbdecodeex function is used with flag...

CVE-2020-5235 Out-of-memory condition in Nanopb is potentially exploitable

There is a potentially exploitable out of memory condition In Nanopb before 0.4.1, 0.3.9.5, and 0.2.9.4. When nanopb is compiled with PBENABLEMALLOC, the message to be decoded contains a repeated string, bytes or message field and realloc runs out of memory when expanding the array nanopb can end...

PT-2020-18331

Name of the Vulnerable Software and Affected Versions Nanopb versions prior to 0.4.1 Nanopb versions prior to 0.3.9.5 Nanopb versions prior to 0.2.9.4 Description There is a potentially exploitable out of memory condition in Nanopb. When Nanopb is compiled with PB ENABLE MALLOC, the message to be...