Vulnerabilidades de iskorotkov (CVE)

Registros CVE publicados para iskorotkov, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

2 resultados

8.7Alta

CVE-2026-46385 hace 5 meses

iskorotkov/avro: CPU Exhaustion in Avro Decoder

iskorotkov avro; Red Hat Cryostat 4 on RHEL 9; Red Hat Multicluster Global Hub 1.4.5; Red Hat Multicluster Global Hub 1.6.5

iskorotkov/avro is a fast Go Avro codec. Prior to 2.33.0, the Avro array and map decoders looped over an attacker-controlled block-count value without checking the underlying reader's error state inside the loop body. Reader.ReadBlockHeader returns the count …

8.7Alta

CVE-2026-46384 hace 5 meses

iskorotkov/avro: Integer Overflow in Avro Decoder

iskorotkov avro; Red Hat Cryostat 4 on RHEL 9; Red Hat Multicluster Global Hub 1.4.5; Red Hat Multicluster Global Hub 1.6.5

iskorotkov/avro is a fast Go Avro codec. Prior to 2.33.0, several Avro decoder paths read attacker-controlled 64-bit values from the wire format and either narrowed them to platform-sized int before bounds-checking, or summed them with overflow-prone signed-i…