Skip to content
Threat Feed
Subscribe

Tag

Protobuf

2 briefs RSS
medium advisory

Wire Protobuf Negative Length Vulnerability (CVE-2026-45799)

A vulnerability in Wire's protobuf group-skipping logic allows a crafted payload with a negative length to cause a runtime exception and potentially crash services decoding untrusted protobuf, addressed in version 6.3.0.

wire-runtime +1 protobuf denial-of-service CVE-2026-45799 wire
2r 2t
high advisory

Protobuf PHP Library Denial of Service Vulnerability

A denial-of-service vulnerability exists in the Protobuf PHP library due to maliciously crafted messages with negative varints or deep recursion, leading to application crashes and impacting service availability.

protobuf dos php
2r 1t