Nanopb Project Nanopb — known CVE vulnerabilities

Every CVE whose affected-product data names Nanopb Project Nanopb, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2014-125106 — CVSS 9.8 (critical): Nanopb before 0.3.1 allows size_t overflows in pb_dec_bytes and pb_dec_string.
• CVE-2020-26243 — CVSS 7.5 (high): Nanopb is a small code-size Protocol Buffers implementation. In Nanopb before versions 0.4.4 and 0.3.9.7, decoding specifically formed…
• CVE-2021-21401 — CVSS 7.1 (high): Nanopb is a small code-size Protocol Buffers implementation in ansi C. In Nanopb before versions 0.3.9.8 and 0.4.5, decoding a specifically…
• CVE-2020-5235 — CVSS 6.5 (medium): There is a potentially exploitable out of memory condition In Nanopb before 0.4.1, 0.3.9.5, and 0.2.9.4. When nanopb is compiled with…