TI-2014-08406 CVE-2014-125106 · GHSA-2gv7-3f72-xfxx
Nanopb before 0.3.1 allows size_t overflows in pb_dec_bytes and pb_dec_string.
Priority MEDIUM 51
Nanopb before 0.3.1 allows size_t overflows in pb_dec_bytes and pb_dec_string.
nanopb
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
nanopb records in CISA KEVNo nanopb vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2020-04291 CVE-2020-5235 · GHSA-6f6v-26gj-6crp
Out-of-memory condition in Nanopb is potentially exploitable
Priority MEDIUM 46
There is a potentially exploitable out of memory condition In Nanopb before 0.4.1, 0.3.9.5, and 0.2.9.4.
TI-2020-16064 CVE-2020-26243 · GHSA-85rr-4rh9-hhwh
Memory leak in nanopb
Priority LOW 38
Nanopb is a small code-size Protocol Buffers implementation.
TI-2021-04499 CVE-2021-21401 · GHSA-7mv5-5mxh-qg88
Invalid free() call in Nanopb
Priority LOW 35
Nanopb is a small code-size Protocol Buffers implementation in ansi C.
TI-2024-36143 CVE-2024-53984
Nanopb does not release memory on error return when using PB_DECODE_DELIMITED
Priority LOW 20
Nanopb is a small code-size Protocol Buffers implementation.