VYPR

Cereal

by Usc

CVEs (2)

  • CVE-2020-11105CriMar 30, 2020
    risk 0.64cvss 9.8epss 0.02

    An issue was discovered in USC iLab cereal through 1.3.0. It employs caching of std::shared_ptr values, using the raw pointer address as a unique identifier. This becomes problematic if an std::shared_ptr variable goes out of scope and is freed, and a new std::shared_ptr is…

  • CVE-2020-11104MedMar 30, 2020
    risk 0.35cvss 5.3epss 0.02

    An issue was discovered in USC iLab cereal through 1.3.0. Serialization of an (initialized) C/C++ long double variable into a BinaryArchive or PortableBinaryArchive leaks several bytes of stack or heap memory, from which sensitive information (such as memory layout or private…