awslabs/aws-c-event-stream

awslabs/aws-c-event-stream

Releases48
Frequency1 month 3 weeks
Last Release
Stars37
C99 implementation of the vnd.amazon.eventstream content-type.

CVE History

CVEPublishedCVSS v3CVSS v2
7.5 HIGH

Out-of-bounds write in the streaming decoder component in aws-c-event-stream before 0.6.0 might allow a third party operating a server to cause memory corruption leading to arbitrary code execution on a client application that processes crafted event-stream messages. To remediate this issue, users should upgrade to version 0.6.0 or later.