PR
Product
Protobuf
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 1Low 0
Watch
Add Protobuf to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-2410 | 9.8 | May 3 | The JsonToBinaryStream() function is part of the protocol buffers C++ implementation and is used to parse JSON from a stream Affected: 4.22.0 before 4.25.0 |
| CVE-2015-5237 | 8.8 | Sep 25 | protobuf allows remote authenticated attackers to cause a heap-based buffer overflow Affected: through 3.1.0 |
| CVE-2026-0994 | 7.5 | Jan 23 | A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested… Affected: through 33.4 |
| CVE-2024-7254 | 7.5 | Sep 19 | Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e Affected: before 3.25.5; 4.0.0 before 4.27.5; 4.28.0 before 4.28.2 |
| CVE-2021-22570 | 5.5 | Jan 26 | Nullptr dereference when a null char is present in a proto symbol Affected: before 3.15.0 |
Showing 5