Known vulnerabilities in Nanopb

Vendor: Nanopb Project
Software: Nanopb
Software CPE: cpe:2.3:a:nanopb_project:nanopb:*:*:*:*:*:*:*:*
Website: https://github.com/nanopb/
Total vulnerabilities: 3
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Nanopb Nanopb is affected by 3 known vulnerabilities: 1 medium, 2 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU76725 - Out-of-bounds read
CVE-2020-5235		 CWE-125 Low
Available
No
 0.2.9.4, 0.3.9.5, 0.4.1 31.05.2023 SB2020020445
#VU76724 - Release of invalid pointer or reference
CVE-2021-21401		 CWE-763 Low
No
No
 0.3.9.8, 0.4.5 31.05.2023 SB2021032317
SB2023053151
#VU76723 - Missing release of memory after effective lifetime
CVE-2020-26243		 CWE-401 Medium
Available
No
 0.3.9.7, 0.4.4 31.05.2023 SB2020112521
SB2023053151