GHSA-2gh3-rmm4-6rq5Medium

Crash due to uncontrolled recursion in protobuf crate

Published
March 7, 2025
Last Modified
August 1, 2025

🔗 CVE IDs covered (1)

📋 Description

Affected version of this crate did not properly parse unknown fields when parsing a user-supplied input.

This allows an attacker to cause a stack overflow when parsing the message on untrusted data.

🎯 Affected products1

  • rust/protobuf:< 3.7.2

🔗 References (5)