VULNERABILITY INTELLIGENCE

CVE-2015-2310

CVSS score9.1 CRITICAL
EPSS probability1.80%
CISA KEVNot currently listed
Published2017-08-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Description

Integer overflow in layout.c++ in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 allows remote peers to cause a denial of service or possibly obtain sensitive information from memory via a crafted message, related to pointer validation.

Weakness classification

  • CWE-190: Integer Overflow or Wraparound

Primary references