Protocol Buffers vulnerabilities

1 known vulnerability in Protocol Buffers from Google. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Protocol Buffers: Out-of-bounds Write

  CVE-2024-7254Sep 19, 2024GoogleEPSS 2.77%

  Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e. StackOverflow. Parsing nested groups as unknown fields with DiscardUnknownFieldsPars