We identified an unbounded-allocation data flow in buffa’s protobuf decoder that I developed into a ~22x memory-amplification denial of service for CVE-2026-55407
Endor Labs’ AI SAST Finds Zero Day Memory-Amplification DoS in Anthropic’s buffa library | Blog | Endor Labs
calendar_today
July 6, 2026
domain
endor-labs