High severity7.5NVD Advisory· Published Jul 9, 2021· Updated Jun 17, 2026
CVE-2021-36155
CVE-2021-36155
Description
LengthPrefixedMessageReader in gRPC Swift 1.1.0 and earlier allocates buffers of arbitrary length, which allows remote attackers to cause uncontrolled resource consumption and deny service.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/grpc/grpc-swiftSwiftURL | < 1.2.0 | 1.2.0 |
Affected products
2- gRPC Swift/gRPC Swiftdescription
Patches
Vulnerability mechanics
References
6- bugs.chromium.org/p/oss-fuzz/issues/detailnvdMailing ListThird Party AdvisoryWEB
- github.com/advisories/GHSA-rxmj-hg9v-vp3pghsaADVISORY
- github.com/grpc/grpc-swift/releasesnvdRelease NotesThird Party Advisory
- github.com/grpc/grpc-swift/security/advisories/GHSA-rxmj-hg9v-vp3pnvdThird Party AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2021-36155ghsaADVISORY
- github.com/grpc/grpc-swift/releases/tag/1.2.0ghsaWEB
News mentions
0No linked articles in our index yet.