1 matches found
ESPHome vulnerable to denial-of-service via out-of-bounds check bypass in the API component
SummaryAn integer overflow in the API component's protobuf decoder allows denial-of-service attacks when API encryption is not used. DetailsThe bounds check ptr + fieldlength end in components/api/proto.cpp can overflow when a malicious client sends a large fieldlength value. This affects all...
7.5CVSS6AI score0.00305EPSS
SaveExploits0References8Affected Software1
20