Protobuf C Project Protobuf C vulnerabilities

2 vulnerabilities

Known vulnerabilities in Protobuf C Project Protobuf C, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.5CVE-2022-48468debianlibsignal-protocol-c+27
EPSS score
0.37%
protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member.5.5CVE-2022-33070alpineprotobuf-c+14
EPSS score
1.11%
Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parse_tag_and_wiretype in protobuf-c/protobuf-c.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors.