Skip to content
OpenAdvisories

Package · Maven

com.google.protobuf:protobuf-java

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.7
    CVE-2024-7254

    Stack overflow in Protocol Buffers Java Lite

    Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e. StackOverflow. Parsing nested groups as unknown fields with DiscardUnknownFieldsPar…

    Google protobuf-java google-protobuf [JRuby Gem] protobuf-kotlin Debian Ubuntu Maven RubyGems
  • High 7.5
    CVE-2022-3510

    Parsing issue in protobuf message-type extension

    A parsing issue similar to CVE-2022-3171, but with Message-Type Extensions in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded…

    Google Protocolbuffers protobuf protobuf Debian Ubuntu Maven
  • High 7.5
    CVE-2022-3509 Public exploit

    Parsing issue in protobuf textformat

    A parsing issue similar to CVE-2022-3171, but with textformat in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages wit…

    Google Protocolbuffers protobuf protobuf Debian Ubuntu Maven
  • High 7.5
    CVE-2021-22569 Public exploit

    Denial of Service of protobuf-java parsing procedure

    An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order. A small malicious payload can occupy the parser for several minutes by creating large numbers of short-lived o…

    Google protobuf-kotlin protobuf-java google-protobuf [JRuby Gem] Debian Ubuntu Maven RubyGems