GHSA-jwvw-v7c5-m82hHighCVSS 8.8

protobuf susceptible to buffer overflow

Published
May 13, 2022
Last Modified
May 29, 2026

🔗 CVE IDs covered (1)

CVE-2015-5237 →

📋 Description

protobuf allows remote authenticated attackers to cause a heap-based buffer overflow.

🎯 Affected products5

  • nuget/Google.Protobuf:< 3.4.0
  • composer/google/protobuf:< 3.4.0
  • pip/protobuf:< 3.4.0
  • go/github.com/protocolbuffers/protobuf:> 0.0.0, < 3.4.0
  • go/github.com/protocolbuffers/protobuf:< 0.0.0-20170815233912-80a37e0782d2

🔗 References (67)