Denial of Service Vulnerability in gRPC Swift Affected Product by Google
CVE-2021-36153

7.5HIGH

Key Information:

Vendor: Linux
Status: Grpc Swift
Vendor: CVE Published:; 9 July 2021

What is CVE-2021-36153?

The gRPC Swift library versions 1.1.0 and 1.1.1 contain a mismanaged state vulnerability in the GRPCWebToHTTP2ServerCodec.swift component. This vulnerability allows remote attackers to exploit the system by sending specially crafted malformed requests, potentially causing a denial of service. Users of affected versions should consider updating to mitigate the risk associated with this vulnerability.