1 result · Feed
-
Medium 5.5
Unbounded memory allocation in `evtx` parsing a `.wevtcache` file
Affected versions of `evtx` did not bound a per-entry payload length read from a `.wevtcache` file before allocating a buffer sized from it, allowing a tiny crafted file to force a multi-gigabyte allocation and abort the process (out-of-memory denial of servi…