Protobuf-kotlin-lite vulnerabilities

2 known vulnerabilities in Protobuf-kotlin-lite from Google. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Protocol Buffers: Out-of-bounds Write

  CVE-2024-7254Sep 19, 2024GoogleEPSS 2.77%

  Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e. StackOverflow. Parsing nested groups as unknown fields with DiscardUnknownFieldsPars

• 7.5 High severity

  A parsing issue with binary data in protobuf-java core and lite versions prior to 3.21.7…

  CVE-2022-3171Oct 12, 2022GoogleEPSS 1.28%

  A parsing issue with binary data in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields c