LengthPrefixedMessageReader in gRPC Swift 1.1.0 and earlier allocates buffers of arbitrary length, which allows remote attackers to cause uncontrolled resource consumption and deny service.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| github.com/grpc/grpc-swift(SwiftURL) | 0 | 1.2.0 | N/A |
CVSS Metrics