Skip to main content

Uncontrolled Recursion

CVE-2024-58264

Low
3.2/10

Summary

The serde-json-wasm crate before 1.0.1 for Rust allows stack consumption via deeply nested JSON data.

  • HIGH
  • LOCAL
  • NONE
  • CHANGED
  • NONE
  • NONE
  • NONE
  • LOW

CWE-674 - Uncontrolled Recursion

The product does not properly control the amount of recursion which takes place, consuming excessive resources, such as allocated memory or the program stack.

References

Advisory Timeline

  • Published