Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2020-28491

Denial of Service (DoS)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
snyk

Description

This affects the package com.fasterxml.jackson.dataformat:jackson-dataformat-cbor from 0 and before 2.11.4, from 2.12.0-rc1 and before 2.12.1. Unchecked allocation of byte buffer can cause a java.lang.OutOfMemoryError exception.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a com.fasterxml.jackson.dataformat:jackson-dataformat-cbor

  • 0 to < unspecifiedaffected
  • unspecified to < 2.11.4affected
  • 2.12.0-rc1 to < unspecifiedaffected
  • unspecified to < 2.12.1affected

References