cve/2023/CVE-2023-3635.md
2024-06-18 02:51:15 +02:00

802 B

CVE-2023-3635

Description

GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer. This may lead to denial of service of the Okio client when handling a crafted GZIP archive, by using the GzipSource class.

POC

Reference

Github