GHSA-4cxw-hq44-r344
Off-by-one Error in v2fly/v2ray-core
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/v2fly/v2ray-core/v4 | < 4.44.0 | 4.44.0 |
| Go | github.com/v2fly/v2ray-core | < 4.44.0 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
v2fly/v2ray-core prior to 4.44.0 is vulnerable to an off-by-one error. Indexing operations on arrays, slices, or strings should use an index at most one less than the length. If the index is checked for being less than or equal to the length (`<=`), instead of less than the length (`<`), the index could be out of bounds.
References
External links from the advisory. They lead to third-party sites.