Skip to content
OpenAdvisories

Product · PelionIoT

cbor-sync

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2020-37280

    cbor-sync through 1.0.4 Memory Exhaustion via Unchecked CBOR Array Lengths

    cbor-sync through 1.0.4 contains a resource exhaustion vulnerability in CBOR.decode that trusts declared array and map lengths without checking remaining input. Remote attackers can supply a tiny crafted CBOR payload declaring huge lengths to drive billions o…

    PelionIoT cbor-sync