Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:fasterxml:jackson-Dataformat-Protobuf:*:*:*:*:*:*:*:*

1 brief RSS
low advisory

FasterXML jackson-dataformat-protobuf: Signed integer overflow denial-of-service (CVE-2026-104016)

A signed integer overflow in the ProtobufParser component of jackson-dataformat-protobuf (CVE-2026-104016) allows unauthenticated remote attackers to trigger an OutOfMemoryError and crash Java applications by providing a maliciously crafted length-prefixed field.

jackson-dataformat-protobuf denial-of-service java deserialization
1c