Skip to content
OpenAdvisories

Package · Debian

nanopb

3 known vulnerabilities.

3 results · Feed

  • Medium 4.3

    Nanopb does not release memory on error return when using PB_DECODE_DELIMITED

    Nanopb is a small code-size Protocol Buffers implementation. When the compile time option PB_ENABLE_MALLOC is enabled, the message contains at least one field with FT_POINTER field type, custom stream callback is used with unknown stream length. and the pb_de…

  • High 7.1
    CVE-2021-21401 Public exploit

    Invalid free() call in Nanopb

    Nanopb is a small code-size Protocol Buffers implementation in ansi C. In Nanopb before versions 0.3.9.8 and 0.4.5, decoding a specifically formed message can cause invalid `free()` or `realloc()` calls if the message type contains an `oneof` field, and the `…

  • High 7.5

    Memory leak in nanopb

    Nanopb is a small code-size Protocol Buffers implementation. In Nanopb before versions 0.4.4 and 0.3.9.7, decoding specifically formed message can leak memory if dynamic allocation is enabled and an oneof field contains a static submessage that contains a dyn…