Threats tagged 'ghsa-x8x8-p968-x646'

A heap out-of-bounds write vulnerability exists in Microsoft.DiaSymReader.Native on Windows platforms when reading crafted native PDB files. This affects multiple .NET runtime versions on Windows x86, x64, and Arm64 architectures. The flaw is due to crafted PDB line metadata exceeding the caller-provided buffer. Microsoft has released patches for affected .NET runtime and SDK versions to address this issue.