Skip to content
OpenAdvisories

Package · Maven

com.google.protobuf:protobuf-javalite

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • High 8.7
    CVE-2024-7254

    Stack overflow in Protocol Buffers Java Lite

    Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e. StackOverflow. Parsing nested groups as unknown fields with DiscardUnknownFieldsPar…

    Google protobuf-kotlin protobuf-java google-protobuf [JRuby Gem] Debian Ubuntu Wolfi Maven RubyGems
  • High 7.5
    CVE-2022-3510

    Parsing issue in protobuf message-type extension

    A parsing issue similar to CVE-2022-3171, but with Message-Type Extensions in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded…

    Google Protocolbuffers druid trino Debian Ubuntu Wolfi Maven
  • High 7.5
    CVE-2022-3509 Public exploit

    Parsing issue in protobuf textformat

    A parsing issue similar to CVE-2022-3171, but with textformat in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages wit…

    Google Protocolbuffers trino trino-plugin-opensearch Debian Ubuntu Wolfi Maven
  • Medium 4.3
    CVE-2022-3171

    Memory handling vulnerability in ProtocolBuffers Java core and lite

    A parsing issue with binary data in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields …

    Google Protocolbuffers druid trino Debian Ubuntu Wolfi Maven RubyGems