Login Request a demo
PR
Product
Protobuf-java
by Google · last CVE Sep 19, 2024
5
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 4Medium 1Low 0
Severity
All severities5Critical0High4Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Protobuf-java to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-7254
7.5
3%
Sep 19
Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e
Affected: before 3.25.5; 4.0.0 before 4.27.5; 4.28.0 before 4.28.2
CVE-2022-3510
7.5
1%
Dec 12
A parsing issue similar to CVE-2022-3171, but with Message-Type Extensions in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial…
Affected: 3.16.0 before 3.16.3; 3.19.0 before 3.19.6; 3.20.0 before 3.20.3; 3.21.0 before 3.21.7
CVE-2022-3509
7.5
1%
Dec 12
A parsing issue similar to CVE-2022-3171, but with textformat in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service…
Affected: 3.16.0 before 3.16.3; 3.19.0 before 3.19.6; 3.20.0 before 3.20.3; 3.21.0 before 3.21.7
CVE-2022-3171
7.5
1%
Oct 12
Memory handling vulnerability in ProtocolBuffers Java core and lite
Affected: before 3.16.3; 3.17.0 before 3.19.6; 3.20.0 before 3.20.3; 3.21.0 before 3.21.7
Showing 4