Out-of-Bounds Write Vulnerability in Google gRPC before 2017-02-22

CVE-2017-7861

What is CVE-2017-7861?

An out-of-bounds write vulnerability exists in Google gRPC versions prior to 2017-02-22 due to an issue related to the gpr_free function in core/lib/support/alloc.c. This flaw allows an attacker to potentially exploit the memory management processes of the gRPC, which could lead to application instability or execution of arbitrary code.

References