Skip to content
OpenAdvisories

Package · Debian

nanopb

3 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.1
    CVE-2021-21401 Public exploit

    Invalid free() call in Nanopb

    Nanopb is a small code-size Protocol Buffers implementation in ansi C. In Nanopb before versions 0.3.9.8 and 0.4.5, decoding a specifically formed message can cause invalid `free()` or `realloc()` calls if the message type contains an `oneof` field, and the `…