Veille CVE

‹ Retour à la liste

CVE-2026-58107

5.5 Moyenne

Publiée le 28/08/2026 à 18:18 · Modifiée le 01/09/2026 à 23:07 · Analyse NVD reportée · Source : 85b1779b-6ecd-4f52-bcc5-73eac4659dcf

Description

CodeChecker's massStoreRun processing path performs one-shot decompression of attacker-controlled, Base64-encoded zlib data without enforcing a maximum decompressed size. An authenticated user with permission to store analysis runs can submit a highly compressed payload that expands to a significantly larger byte sequence. Because the entire decompressed output is materialized in memory before being written to a temporary file, a sufficiently large payload may exhaust process or host memory and consume substantial disk space, resulting in denial of service.

Traduire en français

Produits concernés

Scores CVSS

VersionScoreSourceVecteur
4.0 5.5 Moyenne 85b1779b-6ecd-4f52-bcc5-73eac4659dcf CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:A/V:X/RE:L/U:X

Faiblesses (CWE)

Références

Ailleurs