CVE-2015-4675: Tinysrp Project Tinysrp

High severity, CVSS 7.5. EPSS: 4.6% chance of exploitation in the next 30 days.

Buffer overflow in the Tiny SRP library (aka TinySRP) allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted size value for the username field.

Affected products

• Tinysrp Project Tinysrp: up to and including 0.7.5

Published 2015-06-19. Last modified 2026-06-17.