Skip to content
Google Protobuf vulnerabilities
-
google protobuf-javascript (aka google-protobuf npm package)
Uncontrolled Recursion leading to Denial of Service in protobuf-javascript (google-protobuf)
CVE-2026-89418
Fix available
8.7 High
-
google protobuf, red hat ai inference server 3.2, ai inference server 3.3 +14 more +16 more
Denial of Service in Python Protobuf
CVE-2026-0994
Public exploitFix available
8.2 High
-
google protobuf-python, protocolbuffers python-protobuf +1 more
Unbounded recursion in Python Protobuf
CVE-2025-4565
Fix available
8.2 High
-
google protobuf, protocol buffers, google-protobuf [jruby gem] +8 more +10 more
Stack overflow in Protocol Buffers Java Lite
CVE-2024-7254
Fix available
8.7 High
-
google protobuf
Use after free in C++ protobuf
CVE-2024-2410
Fix available
7.6 High
-
google protobuf-java, protobuf-javalite, protocolbuffers +2 more
Parsing issue in protobuf message-type extension
CVE-2022-3510
Fix available
7.5 High
-
google protobuf-java, protobuf-javalite, protocolbuffers +2 more
Parsing issue in protobuf textformat
CVE-2022-3509
Public exploitFix available
7.5 High
-
google protobuf-java, protocolbuffers, fedoraproject fedora +4 more +6 more
Memory handling vulnerability in ProtocolBuffers Java core and lite
CVE-2022-3171
Fix available
4.3 Medium
-
google protobuf-cpp, protobuf-python, debian linux +1 more +3 more
Out of Memory issue in ProtocolBuffers for cpp and python
CVE-2022-1941
Fix available
7.5 High
-
google protobuf, debian linux, fedoraproject fedora +5 more +7 more
Nullptr Dereference in Protobuf
CVE-2021-22570
Fix available
6.5 Medium
-
google protobuf-java, google-protobuf, google-protobuf [jruby gem] +5 more +7 more
Denial of Service of protobuf-java parsing procedure
CVE-2021-22569
Public exploitFix available
7.5 High
-
google protobuf
protobuf susceptible to buffer overflow
CVE-2015-5237
Fix available
8.8 High