Skip to content
Threat Feed
Subscribe

Tag

Cbor-Extract

1 brief RSS
high advisory

fido2-lib Denial-of-Service Vulnerability via CBOR Parsing

The fido2-lib library is vulnerable to a denial-of-service (DoS) attack due to a heap buffer over-read in the cbor-extract dependency when parsing CBOR attestation data, allowing an attacker to crash the server by sending a crafted CBOR payload during WebAuthn registration.

fido2-lib cbor-extract denial-of-service webauthn
2r 1t