Exploit for Release of Invalid Pointer or Reference in Nanopb Project Nanopb CVE-2021-21401

Name: Exploit for Release of Invalid Pointer or Reference in Nanopb Project Nanopb CVE-2021-21401
Rating: 5 (62 reviews)

2024-11-05 | CVSS 6.9

## https://sploitus.com/exploit?id=B1C5C976-F22A-545D-8089-2F61D0B2D421
URL: https://jpa.kapsi.fi/nanopb/
Version: 0.3.9.1
License: zlib
Description: "nanopb-c: A plugin for Google Protobuf compiler that generates C code"

To use with Android modify Android.mk adding .proto files to
LOCAL_SRC_FILES and set LOCAL_PROTOC_OPTIMIZE_TYPE:

  LOCAL_SRC_FILES += simple.proto
  LOCAL_PROTOC_OPTIMIZE_TYPE := nanopb-c

Then look at https://jpa.kapsi.fi/nanopb/ Documentation for how to use nanopb-c.