Red Hat Security Advisory

RHSA-2025:20057

Red Hat JBoss Enterprise Application Platform 7.4.23 security update

Released 2025-11-10 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss Enterprise Application Platform 7.4.24 org.infinispan.protostream.protostream-4.3.7.Final-redhat-00001.jar

Fixes 1 record

TI-2024-06719 CVE-2024-7254 · GHSA-735f-pc8j-v9w8

Stack overflow in Protocol Buffers Java Lite

MEDIUM 49

Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.02772 Published 2024-09-19 Partial fix · 28.2, 3.25.5 +2 CWE-400