Skip to content

nathunandwani/shareit-cwe-789

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

6 Commits
 
 
 
 
 
 

Repository files navigation

shareit-cwe-789 - Uncontrolled Memory Allocation

CVE-2019-14941
SHAREit v4.0.6.177's unsecured channel for Windows does not check the body length from the received packet header. The body length is used to allocate memory for the expected data to be received. This could lead to resource exhaustion with the limitation of theoretically being able to allocate a maximum 2 GB of memory.

CVE-2019-15234
SHAREit v4.0.6.177's secured channel for Windows does not check the full message length from the received packet header. The full message length is used to allocate memory for the expected data to be received. This could lead to resource exhaustion with the limitation of theoretically being able to allocate a maximum 2 GB of memory.

About

Uncontrolled Memory Allocation

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages