critical9.8
CVE-2014-125106
Nanopb before 0.3.1 allows size_t overflows in pb_dec_bytes and pb_dec_string.
Impact
Nanopb before 0.3.1 allows size_t overflows in pb_dec_bytes and pb_dec_string.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nanopb Project | Nanopb | before 0.3.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/nanopb/nanopb/blob/master/CHANGELOG.txt
- https://github.com/nanopb/nanopb/commit/d2099cc8f1adb33d427a44a5e32ed27b647c7168
- https://github.com/nanopb/nanopb/compare/nanopb-0.3.0...nanopb-0.3.1
- https://github.com/nanopb/nanopb/blob/master/CHANGELOG.txt
- https://github.com/nanopb/nanopb/commit/d2099cc8f1adb33d427a44a5e32ed27b647c7168
- https://github.com/nanopb/nanopb/compare/nanopb-0.3.0...nanopb-0.3.1