Skip to content
Threat Feed
Subscribe

Vendor

Elixir-Protobuf

1 brief RSS
medium advisory

Unbounded Recursion Depth in Elixir Protobuf Decoder Causes Denial of Service

An unauthenticated attacker can trigger a denial-of-service condition in services that decode untrusted protobuf messages using the `Protobuf.Decoder` (Hex package `protobuf`) versions between 0.8.0 and 0.16.1 by crafting deeply nested self-referential message types, leading to memory exhaustion and service crashes.

protobuf denial-of-service vulnerability elixir
1t