CVE-2017-8359

Critical

Published: 30/04/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpc_call_destroy function.

Risk Assessment

This vulnerability may lead to unauthorized memory access, posing a risk of arbitrary code execution or application crashes.

Recommendation

It is recommended to update Google gRPC to a version after 2017-03-29 to mitigate this vulnerability.

Original NVD description (English source)

Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpc_call_destroy function in core/lib/surface/call.c.