CVE-2020-11104

An issue was discovered in USC iLab cereal through 1.3.0. Serialization of an (initialized) C/C++ long double variable into a BinaryArchive or PortableBinaryArchive leaks several bytes of stack or heap memory, from which sensitive information (such as memory layout or private keys) can be gleaned if the archive is distributed outside of a trusted context.
References
Link Resource
https://github.com/USCiLab/cereal/issues/625 Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:usc:cereal:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2020-03-30 22:15

Updated : 2024-02-04 21:00


NVD link : CVE-2020-11104

Mitre link : CVE-2020-11104

CVE.ORG link : CVE-2020-11104


JSON object : View

Products Affected

usc

  • cereal
CWE
CWE-908

Use of Uninitialized Resource