CVE-2021-36155: Linuxfoundation Grpc Swift

High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days.

LengthPrefixedMessageReader in gRPC Swift 1.1.0 and earlier allocates buffers of arbitrary length, which allows remote attackers to cause uncontrolled resource consumption and deny service.

Affected products

• Linuxfoundation Grpc Swift: version 1.0.0 only; version 1.1.0 only; version 1.1.1 only

Published 2021-07-09. Last modified 2026-06-17.