VYPR
← All advisories
High severity7.5NVD Advisory· Published Aug 20, 2023· Updated Jun 17, 2026

CVE-2023-40711

CVE-2023-40711

Description

Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which allows remote attackers to cause a denial of service (out-of-memory abort) via crafted packet data, as exploited in the wild in August 2023.

Affected products

3
  • Veilid/Veilid3 versions
    cpe:2.3:a:veilid:veilid:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:veilid:veilid:*:*:*:*:*:*:*:*range: <0.1.9
    • (no CPE)
    • (no CPE)range: <0.1.9

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.