Protobuf-c Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Protobuf-c Project records in CISA KEV

No Protobuf-c Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Protobuf-c · all components

TI-2022-14549 CVE-2022-33070 · GHSA-xcrq-6j7j-784j

LOW 27

Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parse_tag_and_wiretype in protobuf-c/protobuf-c.c.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0111 Published 2022-06-22 Fix deferred

TI-2022-24048 CVE-2022-48468 · GHSA-g29w-rp5q-p5vq

LOW 25

protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00369 Published 2023-04-13 Partial fix CWE-190