Skip to content
Threat Feed
Subscribe

Tag

Protobuf

3 briefs RSS
medium advisory

Unbounded Recursion Depth in Elixir Protobuf Decoder Causes Denial of Service

An unauthenticated attacker can trigger a denial-of-service condition in services that decode untrusted protobuf messages using the `Protobuf.Decoder` (Hex package `protobuf`) versions between 0.8.0 and 0.16.1 by crafting deeply nested self-referential message types, leading to memory exhaustion and service crashes.

protobuf denial-of-service vulnerability elixir
1t
medium advisory

Wire Protobuf Negative Length Vulnerability (CVE-2026-45799)

A vulnerability in Wire's protobuf group-skipping logic allows a crafted payload with a negative length to cause a runtime exception and potentially crash services decoding untrusted protobuf, addressed in version 6.3.0.

wire-runtime +1 protobuf denial-of-service CVE-2026-45799 wire
2r 2t
high advisory

Protobuf PHP Library Denial of Service Vulnerability

A denial-of-service vulnerability exists in the Protobuf PHP library due to maliciously crafted messages with negative varints or deep recursion, leading to application crashes and impacting service availability.

protobuf dos php
2r 1t