CVE record · 1 source
CVE-2026-87849
The Discovery naming-service reply parser in Apache bRPC (versions < 1.18.0) calls RapidJSON object-only accessors (FindMember) on JSON values…
- Vendor
- Apple, GitHub
- Product
- ios, github
- Exposure class
- Mobile OS
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
The Discovery naming-service reply parser in Apache bRPC (versions < 1.18.0) calls RapidJSON object-only accessors (FindMember) on JSON values…
The Discovery naming-service reply parser in Apache bRPC (versions < 1.18.0) calls RapidJSON object-only accessors (FindMember) on JSON values without first validating that those values are objects. A malformed Discovery response…