Filtered by vendor Pelioniot
Subscriptions
Filtered by product Cbor-sync
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2020-37280 | 1 Pelioniot | 1 Cbor-sync | 2026-10-13 | 7.5 High |
| cbor-sync through 1.0.4 contains a resource exhaustion vulnerability in CBOR.decode that trusts declared array and map lengths without checking remaining input. Remote attackers can supply a tiny crafted CBOR payload declaring huge lengths to drive billions of iterations, exhausting CPU and process memory. | ||||
Page 1 of 1.