Heap-Based Buffer Overflow in Google gRPC Affects Multiple Versions
CVE-2017-7860

9.8CRITICAL

Key Information:

Vendor: Grpc
Status: Grpc
Vendor: CVE Published:; 14 April 2017

What is CVE-2017-7860?

A vulnerability in Google gRPC prior to February 22, 2017, allows for a heap-based buffer overflow. This is related to the parse_unix function within the core/ext/client_channel/parse_address.c file. Exploitation of this flaw may permit unauthorized access or manipulation of the system's memory, which could lead to unpredictable behavior and potential data leaks.