CVE-2020-36429

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Variant_encodeJson in open62541 1.x before 1.0.4 has an out-of-bounds write for a large recursion depth.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20578Patch, Third Party Advisory
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/open62541/OSV-2020-153.yamlThird Party Advisory
https://github.com/open62541/open62541/commit/c800e2987b10bb3af6ef644b515b5d6392f8861dPatch, Third Party Advisory
https://github.com/open62541/open62541/compare/v1.0.3...v1.0.4Patch, Third Party Advisory
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20578Patch, Third Party Advisory
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/open62541/OSV-2020-153.yamlThird Party Advisory
https://github.com/open62541/open62541/commit/c800e2987b10bb3af6ef644b515b5d6392f8861dPatch, Third Party Advisory
https://github.com/open62541/open62541/compare/v1.0.3...v1.0.4Patch, Third Party Advisory

Timeline

Published: Jul 20, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-36435.5u'Information disclosure issue can occur due to partial secure display-touch session tear-down' in Snapdragon Auto, Snapdragon Compute, Snap CVE-2020-364307.8libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and process_text) because the wrong in CVE-2020-364315.5Unicorn Engine 1.0.2 has an out-of-bounds write in helper_wfe_arm.CVE-2020-364329.8An issue was discovered in the alg_ds crate through 2020-08-25 for Rust. There is a drop of uninitialized memory in Matrix::new().CVE-2020-364337.5An issue was discovered in the chunky crate through 2020-08-25 for Rust. The Chunk API does not honor an alignment requirement.CVE-2020-364349.8An issue was discovered in the sys-info crate before 0.8.0 for Rust. sys_info::disk_info calls can trigger a double free.CVE-2020-364358.1An issue was discovered in the ruspiro-singleton crate before 0.4.1 for Rust. In Singleton, Send and Sync do not have bounds checks.CVE-2020-364368.1An issue was discovered in the unicycle crate before 0.7.1 for Rust. PinSlab<T> and Unordered<T, S> do not have bounds on their Send and Syn CVE-2020-364378.1An issue was discovered in the conqueue crate before 0.4.0 for Rust. There are unconditional implementations of Send and Sync for QueueSende CVE-2020-364388.1An issue was discovered in the tiny_future crate before 0.4.0 for Rust. Future<T> does not have bounds on its Send and Sync traits.CVE-2020-364398.1An issue was discovered in the ticketed_lock crate before 0.3.0 for Rust. There are unconditional implementations of Send for ReadTicket<T> CVE-2020-36445.5u'Information disclosure issue occurs as in current logic Secure Touch session is released without terminating display session' in Snapdrago