CVE-2026-42420
OpenClaw < 2026.4.8 - Improper Base64 Decoding Size Validation
Résumé
OpenClaw < 2026.4.8 - Improper Base64 Decoding Size Validation
Description d'origine
La description telle que publiée par la source (souvent en anglais).
OpenClaw before 2026.4.8 contains improper input validation in base64 decode paths that allocate memory before enforcing decoded-size limits. Attackers can exploit multiple code paths to cause memory exhaustion or denial of service through crafted base64-encoded input.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- advisory vulncheck.com
- patch github.com