Deserialization Of Untrusted Data

dm-reverb is vulnerable to Deserialization of Untrusted Data. The vulnerability is due to the unpacking process of tensor proto of type VARIANT. An attacker can gain control of the Program Counter by inserting malicious streams into the server's database, which are then unpacked when the client...