Threats tagged 'ghsa-x3v7-qh5m-v37c'

VRPN versions through 07.36 have an out-of-bounds stack write vulnerability in the functions vrpn_Endpoint::handle_sender_message() and handle_type_message(). This flaw allows unauthenticated remote peers to write outside the stack buffer by sending crafted messages with an unchecked length index, potentially causing a process crash.