Skip to content
Threat Feed
Subscribe

Vendor

Gotd

1 brief RSS
high advisory

td Library Denial of Service via Unbounded Memory Allocation

A denial-of-service vulnerability exists in the `go/github.com/gotd/td` library versions prior to 0.145.1. A remote, unauthenticated attacker can exploit this by sending a crafted unencrypted MTProto packet during the handshake. This packet declares a large `dataLen` value, forcing the application to allocate an excessive amount of memory, potentially leading to out-of-memory (OOM) termination and denial of service due to unbounded memory allocation before length validation.

go/github.com/gotd/td denial-of-service vulnerability go-lang
1t