Google gRPC before 2017-02-22 has an out-of-bounds write related to the gpr_free function in core/lib/support/alloc.c.
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HGrpc
APPGrpc≤ 1.1.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Memory
CWE
Related vulnerabilities
CVE-2026-33186CRITICAL9.1PL ✓same product
gRPC-Go: Authorization Bypass przez nieprawidłowy nagłówek HTTP/2 :path
CVE-2017-9431CRITICAL9.8PL ✓same product
Heap-based buffer overflow w Google gRPC — zapis poza granicami pamięci
CVE-2017-8359CRITICAL9.8PL ✓same product
Google gRPC — zapis poza granicami pamięci przez use-after-free w grpc_call_destroy
CVE-2017-7860CRITICAL9.8PL ✓same product
Przepełnienie bufora sterty (heap buffer overflow) w Google gRPC — zapis poza granicami
CVE-2023-4785HIGH7.5same product
Lack of error handling in the TCP server in Google's gRPC starting version 1.23 on posix-compatible platforms ...