Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:22465
HistoryFeb 05, 2020 - 5:32 a.m.

Invalid Memory Free

2020-02-0505:32:51
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
17

0.003 Low

EPSS

Percentile

65.8%

nanopb is vulnerable to invalid freeing of memory. The vulnerability possible when it calls the function free() on a pointer value that comes from uninitialized memory and when the following conditions are met: 1. compile with PB_ENABLE_MALLOC and 2. message to be decoded contains a repeated string, bytes or message field and 3. realloc() runs out of memory when expanding the array

CPENameOperatorVersion
nanopble0.3.9011
nanopble0.3.9011

0.003 Low

EPSS

Percentile

65.8%