CVE-2024-23684: Peteroupc Cbor

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation (CBOR) versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted input. Depending on an application's use of this library, this may be a remote attacker.

Affected products

• Peteroupc Cbor: from 4.0.0, before 4.5.1 (fixed in 4.5.1)

Published 2024-01-19. Last modified 2026-07-14.