2 matches found
Potential memory exhaustion attack due to sparse slice deserialization
Details Running schema.Decoder.Decode on a struct that has a field of type struct... opens it up to malicious attacks regarding memory allocations, taking advantage of the sparse slice functionality. For instance, in the Proof of Concept written below, someone can specify to set a field of the...
7.5CVSS7.2AI score0.01105EPSS
SaveExploits0References5Affected Software1
20