CVE-2024-4420
Stay organized with collections
Save and categorize content based on your preferences.
- Affected Versions
- Tink C++, 2.1.2 and earlier.
Description
An adversary can crash binaries using the crypto::tink::JsonKeysetReader in
Tink C++ by providing an input that is not an encoded JSON object, but still a
valid encoded JSON element, for example a number or an array. This will crash
as Tink just assumes any valid JSON input will contain an object.
An adversary can crash binaries using the crypto::tink::JsonKeysetReader
in Tink C++ by providing an input containing many nested JSON objects.
This may result in a stack overflow.
Users are affected by this issue if JSON keysets are read from an external
untrusted source (e.g. a public key provided by another party).
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2024-11-14 UTC.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2024-11-14 UTC."],[[["Tink C++ versions 2.1.2 and earlier are vulnerable to crashes when processing maliciously crafted JSON keysets."],["Attackers can exploit vulnerabilities in `crypto::tink::JsonKeysetReader` by providing malformed JSON input, leading to crashes or stack overflows."],["Users are at risk if they load JSON keysets from untrusted external sources."]]],["Tink C++ versions 2.1.2 and earlier are vulnerable to crashes via `JsonKeysetReader`. Providing non-object JSON input (e.g., numbers or arrays) will cause a crash. Additionally, deeply nested JSON objects can trigger a stack overflow, leading to another crash. This affects users who read JSON keysets from untrusted external sources.\n"]]
