Threats tagged 'ghsa-r8h3-p8p6-ggp7'

A high-severity vulnerability (CWE-122) in Microsoft .NET on Windows allows an out-of-bounds write triggered by a crafted Portable PDB EmbeddedSource record with parent RID 0. This affects Microsoft.DiaSymReader.Native components in .NET versions 8.0.0 up to but not including 8.0.34, 9.0.0 up to 9.0.23, 10.0.0 up to 10.0.15, and 11.0.0-preview.1 up to 11.0.0. The vulnerability impacts x86, x64, and Arm64 architectures and can be reached via the Windows runtime's native stack-trace reader fallback. Fixed versions are available and users are advised to update to these patched releases.