Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 17:49:40 +0000 CVE-2020-37280 — cbor-sync through 1.0.4 Memory Exhaustion via Unchecked CBOR Array Lengths https://db.gcve.eu/vuln/cve-2020-37280 <p><strong>Affected:</strong> PelionIoT cbor-sync</p> <p>cbor-sync through 1.0.4 contains a resource exhaustion vulnerability in CBOR.decode that trusts declared array and map lengths without checking remaining input. Remote attackers can supply a tiny crafted CBOR payload declaring huge lengths to drive billions of iterations, exhausting CPU and process memory.</p> <p><strong>Affected:</strong> PelionIoT cbor-sync</p> <p>cbor-sync through 1.0.4 contains a resource exhaustion vulnerability in CBOR.decode that trusts declared array and map lengths without checking remaining input. Remote attackers can supply a tiny crafted CBOR payload declaring huge lengths to drive billions of iterations, exhausting CPU and process memory.</p> https://db.gcve.eu/vuln/cve-2020-37280