Google-protobuf (Google) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2024-09-19. Vendor: Google.

CVEs of Google-protobuf

• CVE-2024-7254 - CVSS 8.7 (high), 2024-09-19: Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the…
• CVE-2022-3171 - CVSS 7.5 (high), 2022-10-12: A parsing issue with binary data in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack.…
• CVE-2021-22569 - CVSS 7.5 (high), 2022-01-10: An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order. A small…