Threats tagged 'ghsa-px5f-q4rm-r7jp'

Apache bRPC versions prior to 1.18.0 contain an uncontrolled resource allocation vulnerability in the mcpack2pb component. This flaw allows remote attackers to cause the server to allocate excessive memory by sending a specially crafted mcpack request with an abnormally large array item count. The vulnerability arises because the mcpack2pb parser trusts the declared item count without validating it against the actual payload size, leading to potential process aborts due to memory exhaustion.