Skip to content
OpenAdvisories

Product · Google

Google Cloud IoT Device SDK for Embedded C

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2021-22547

    Buffer overrun in Google Cloud IoT Device SDK for Embedded C

    In IoT Devices SDK, there is an implementation of calloc() that doesn't have a length check. An attacker could pass in memory objects larger than the buffer and wrap around to have a smaller buffer than required, allowing the attacker access to the other part…

    Google Google Cloud IoT Device SDK for Embedded C