CVE-2022-46149

MEDIUM5.4EPSS 0.21%

out-of-bounds read possible when setting list-of-pointers

Published: 12/5/2022Modified: 11/8/2023
Also known as:GHSA-qqff-4vw4-f6hxRUSTSEC-2022-0068

Description

If a message consumer expects data of type "list of pointers", and if the consumer performs certain specific actions on such data, then a message producer can cause the consumer to read out-of-bounds memory. This could trigger a process crash in the consumer, or in some cases could allow exfiltration of private in-memory data. The C++ Cap'n Proto library is also affected by this bug. See the [advisory](https://github.com/capnproto/capnproto/tree/master/security-advisories/2022-11-30-0-pointer-list-bounds.md) on the main Cap'n Proto repo for a succinct description of the exact circumstances in which the problem can arise.

Affected packages (4)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1MEDIUM5.4CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L

References (13)