CVE-2020-36406

State: Published
Severity: Not scored
Published: Jul 1, 2021
Updated: Aug 4, 2024
Reserved: Jul 1, 2021

Description

uWebSockets 18.11.0 and 18.12.0 has a stack-based buffer overflow in uWS::TopicTree::trimTree (called from uWS::TopicTree::unsubscribeAll). NOTE: the vendor's position is that this is "a minor issue or not even an issue at all" because the developer of an application (that uses uWebSockets) should not be allowing the large number of triggered topics to accumulate

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/uwebsockets/OSV-2020-1695.yaml
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25381
https://github.com/uNetworking/uWebSockets/commit/03fca626a95130ab80f86adada54b29d27242759

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.