CVEs-PoC/2020/CVE-2020-35858.md

CVE-2020-35858

Description

An issue was discovered in the prost crate before 0.6.1 for Rust. There is stack consumption via a crafted message, causing a denial of service (e.g., x86) or possibly remote code execution (e.g., ARM).

POC

Reference

No PoCs from references.

Github

• https://github.com/Artisan-Lab/Rust-memory-safety-bugs
• https://github.com/Ren-ZY/RustSoda