Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
vstinner/hachoir
main @ 4909a6d
5
Fixes
0
CVEs
MEDIUM
Peak severity
Highlights
Denial of Service: 5 prior fixes. Scrutinize any change in this area.
hachoir-parser: most-fixed (1 issue). Treat as high-risk during review.
0 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Denial of Service: Unbounded resource exhaustion and infinite parsing depth can occur during EXE resource resolution. This risk requires strict recursion and section counts to mitigate CPU/memory exhaustion.
Denial of Service: Unchecked header sizes in file format structures, such as ASF, can cause massive memory allocations or parser hangs if not constrained early in the validation phase.
Denial of Service: Unhandled exceptions (such as InputStreamError) during file structure parsing and initial format validation cause untrusted binary payloads to completely crash the parsing utility.