Tag
Unbounded Recursion Depth in Elixir Protobuf Decoder Causes Denial of Service
1 TTPAn unauthenticated attacker can trigger a denial-of-service condition in services that decode untrusted protobuf messages using the `Protobuf.Decoder` (Hex package `protobuf`) versions between 0.8.0 and 0.16.1 by crafting deeply nested self-referential message types, leading to memory exhaustion and service crashes.
Wire Protobuf Negative Length Vulnerability (CVE-2026-45799)
2 rules 2 TTPs 1 CVEA vulnerability in Wire's protobuf group-skipping logic allows a crafted payload with a negative length to cause a runtime exception and potentially crash services decoding untrusted protobuf, addressed in version 6.3.0.
Protobuf PHP Library Denial of Service Vulnerability
2 rules 1 TTPA denial-of-service vulnerability exists in the Protobuf PHP library due to maliciously crafted messages with negative varints or deep recursion, leading to application crashes and impacting service availability.
Protobuf PHP Library Denial of Service Vulnerability
2 rules 1 TTPA denial-of-service vulnerability exists in the Protobuf PHP library due to maliciously crafted messages with negative varints or deep recursion, leading to application crashes and impacting service availability.