Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: nanopb Component: Nanopb Clear all filters
TI-2021-04499 CVE-2021-21401 · GHSA-7mv5-5mxh-qg88

Invalid free() call in Nanopb

Priority LOW 35

Nanopb is a small code-size Protocol Buffers implementation in ansi C.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.01811 Published 2021-03-23 Fixed in 0.3.9.8, 0.4.5 CWE-763
TI-2020-16064 CVE-2020-26243 · GHSA-85rr-4rh9-hhwh

Memory leak in nanopb

Priority LOW 38

Nanopb is a small code-size Protocol Buffers implementation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02664 Published 2020-11-25 Partial fix · 0.3.9.7, 0.4.4 CWE-119
TI-2020-04291 CVE-2020-5235 · GHSA-6f6v-26gj-6crp

Out-of-memory condition in Nanopb is potentially exploitable

Priority MEDIUM 46

There is a potentially exploitable out of memory condition In Nanopb before 0.4.1, 0.3.9.5, and 0.2.9.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01726 Published 2020-02-04 Fixed in 0.2.9.4, 0.3.9.5 +1 CWE-125