CVE-2023-24535

7.5

HIGHCVSS v3

Published

June 8, 2023

Affected

9 projects

Assigned by

[email protected]

Severity scale

010

Description

Parsing invalid messages can panic. Parsing a text-format message which contains a potential number consisting of a minus sign, one or more characters of whitespace, and no further input will cause a panic.

protocolbuffers/protobuf

GitHubProtocol Buffers - Google's data interchange format

= 1.29.0NVD

golang/protobuf

GitHubGo support for Google's protocol buffers

= 1.29.0NVD

protobuf

NuGet Gallery

More on this CVE

NVD↗GitHub Advisory↗

Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.

= 1.29.0NVD

protobuf

Python Package Index

= 1.29.0NVD

protobuf

Crates.ioProtocol Buffers - Google's data interchange format

= 1.29.0NVD

protobuf

NPMProtocol Buffers for NodeJS

= 1.29.0NVD

chrisdew/protobuf

GitHubProtocol Buffers for Node.JS

= 1.29.0NVD

protobuf

RubyGemsGoogle Protocol Buffers serialization and RPC implementation for Ruby.

= 1.29.0NVD

ruby-protobuf/protobuf

GitHubA pure ruby implementation of Google's Protocol Buffers

= 1.29.0NVD

Security Advisories

CVE-2023-24535

Description

More on this CVE