CVE-2021-36155

Description

LengthPrefixedMessageReader in gRPC Swift 1.1.0 and earlier allocates buffers of arbitrary length, which allows remote attackers to cause uncontrolled resource consumption and deny service.

Affected Platforms

Weakness Type

CWE-770

References

• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35303
• https://github.com/grpc/grpc-swift/releases
• https://github.com/grpc/grpc-swift/security/advisories/GHSA-rxmj-hg9v-vp3p
• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35303
• https://github.com/grpc/grpc-swift/releases
• https://github.com/grpc/grpc-swift/security/advisories/GHSA-rxmj-hg9v-vp3p