Skip to content
OpenAdvisories

Vendor

gmrtd

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 5.9

    gmrtd ReadFile Vulnerable to Denial of Service via Excessive TLV Length Values

    gmrtd is a Go library for reading Machine Readable Travel Documents (MRTDs). Prior to version 0.17.2, ReadFile accepts TLVs with lengths that can range up to 4GB, which can cause unconstrained resource consumption in both memory and cpu cycles. ReadFile can c…