Skip to content
OpenAdvisories

Vendor

nanopb

4 known vulnerabilities.

Products

nanopb 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2024-53984

    Nanopb does not release memory on error return when using PB_DECODE_DELIMITED

    Nanopb is a small code-size Protocol Buffers implementation. When the compile time option PB_ENABLE_MALLOC is enabled, the message contains at least one field with FT_POINTER field type, custom stream callback is used with unknown stream length. and the pb_de…

    nanopb nanopb nanopb nanopb Debian Ubuntu
  • Medium 6.5
    CVE-2020-5235

    Out-of-memory condition in Nanopb is potentially exploitable

    There is a potentially exploitable out of memory condition In Nanopb before 0.4.1, 0.3.9.5, and 0.2.9.4. When nanopb is compiled with PB_ENABLE_MALLOC, the message to be decoded contains a repeated string, bytes or message field and realloc() runs out of memo…

    nanopb nanopb