Protobuf-java (Google) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 174 known versions, newest CVE from 2024-09-19. Vendor: Google.

CVEs of Protobuf-java

• CVE-2024-7254 - CVSS 8.7 (high), 2024-09-19: Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the…
• CVE-2022-3509 - CVSS 7.5 (high), 2022-12-12: A parsing issue similar to CVE-2022-3171, but with textformat in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a…
• CVE-2022-3510 - CVSS 7.5 (high), 2022-12-12: A parsing issue similar to CVE-2022-3171, but with Message-Type Extensions in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3…
• CVE-2022-3171 - CVSS 7.5 (high), 2022-10-12: A parsing issue with binary data in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack.…
• CVE-2021-22569 - CVSS 7.5 (high), 2022-01-10: An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order. A small…