protobuf susceptible to buffer overflow

GHSA-jwvw-v7c5-m82h · CVE-2015-5237 · PYSEC-2017-65

Published May 13, 2022 · Modified Jul 9, 2026

AI SAST

Find this class of vulnerability in your own code

Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.

Explore AI SAST Explore dependency scanning →

Description

protobuf allows remote authenticated attackers to cause a heap-based buffer overflow.

References

8.8 / 10

HIGH CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Packages

Go/github.com/protocolbuffers/protobuf

Fix 3.4.0

Introduced 0

Maven/com.google.protobuf:protobuf-parent

Fix 3.4.0

Introduced 0

10 affected versions

3.0.03.0.0-beta-33.0.0-beta-43.0.23.1.03.2.03.2.0-rc.13.2.0rc23.3.03.3.1

NuGet/Google.Protobuf

Fix 3.4.0

Introduced 0

11 affected versions

0.0.1-test13.0.03.0.0-alpha43.0.0-beta23.0.0-beta33.0.0-beta43.1.03.2.03.2.0-rc13.2.0-rc23.3.0

Packagist/google/protobuf

Fix 3.4.0

Introduced 0

9 affected versions

v3.1.0-alpha-1v3.2.0-alpha-1v3.3.0v3.3.0rc1v3.3.1v3.3.2v3.4.0rc1v3.4.0rc2v3.4.0rc3

PyPI/protobuf

Fix 3.4.0

Introduced 0

25 affected versions

2.0.0beta2.0.32.3.02.4.12.5.02.6.02.6.13.0.03.0.0a23.0.0a33.0.0b13.0.0b1.post13.0.0b1.post23.0.0b23.0.0b2.post13.0.0b2.post23.0.0b33.0.0b43.1.03.1.0.post1 +5 more

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes

protobuf susceptible to buffer overflow

Description

References

More NuGet vulnerabilities

Start Securing