Usc

Cereal

2 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2020-11104

Exploit
  • EPSS 0.32%
  • Veröffentlicht 30.03.2020 22:15:15
  • Zuletzt bearbeitet 21.11.2024 04:56:47

An issue was discovered in USC iLab cereal through 1.3.0. Serialization of an (initialized) C/C++ long double variable into a BinaryArchive or PortableBinaryArchive leaks several bytes of stack or heap memory, from which sensitive information (such a...

9.8

CVE-2020-11105

Exploit
  • EPSS 0.52%
  • Veröffentlicht 30.03.2020 22:15:15
  • Zuletzt bearbeitet 21.11.2024 04:56:47

An issue was discovered in USC iLab cereal through 1.3.0. It employs caching of std::shared_ptr values, using the raw pointer address as a unique identifier. This becomes problematic if an std::shared_ptr variable goes out of scope and is freed, and ...