Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2020-5235— Out-of-memory condition in Nanopb is potentially exploitable

Quick assessment

Affected

nanopb Nanopb

Exploitation

Public or AI PoC available; prioritize validation

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Nanopb是Nanopb个人开发者的一个适用于微处理器的协议缓冲区实现。 Nanopb 0.4.1之前版本、0.3.9.5之前版本和0.2.9.4之前版本中存在缓冲区错误漏洞。攻击者可借助特制的文件利用该漏洞造成应用程序崩溃。

CVSS 6.5 · Medium EPSS 1.73% · P77 Updated Feb 24, 2026

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2020-5235

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Out-of-memory condition in Nanopb is potentially exploitable

Source: CVE Program / CVE List V5

Vulnerability Description

There is a potentially exploitable out of memory condition In Nanopb before 0.4.1, 0.3.9.5, and 0.2.9.4. When nanopb is compiled with PB_ENABLE_MALLOC, the message to be decoded contains a repeated string, bytes or message field and realloc() runs out of memory when expanding the array nanopb can end up calling `free()` on a pointer value that comes from uninitialized memory. Depending on platform this can result in a crash or further memory corruption, which may be exploitable in some cases. This problem is fixed in nanopb-0.4.1, nanopb-0.3.9.5, nanopb-0.2.9.4.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L

Source: CVE Program / CVE List V5

Vulnerability Type

跨界内存读

Source: CVE Program / CVE List V5

Vulnerability Title

Nanopb 缓冲区错误漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
nanopb	Nanopb	< 0.2.9.4	-

II. Public POCs for CVE-2020-5235

#	POC Description	Source Link	Shenlong Link
1	None	https://github.com/uthrasri/CVE-2020-5235_nanopb-c_AOSP10_R33	POC Details

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2020-5235

请登录查看更多情报信息。

Patches & Fixes for CVE-2020-5235 (3)

https://github.com/nanopb/nanopb/commit/aa9d0d1ca78d6adec3adfeecf3a706c7f9df81f2 x_refsource_MISC
https://github.com/nanopb/nanopb/commit/7b396821ddd06df8e39143f16e1dc0a4645b89a3 x_refsource_MISC
https://github.com/nanopb/nanopb/commit/45582f1f97f49e2abfdba1463d1e1027682d9856 x_refsource_MISC

Vendor Advisories for CVE-2020-5235 (1)

https://github.com/nanopb/nanopb/security/advisories/GHSA-gcx3-7m76-287p x_refsource_CONFIRM

https://www.cve.org/CVERecord?id=CVE-2020-5235

IV. Related Vulnerabilities

Same product: Nanopb

Same vendor: nanopb

Same weakness: CWE-125