Known vulnerabilities in protobuf
Vendor:
Google
Software:
protobuf
Software CPE:
cpe:2.3:a:google:protobuf:*:*:*:*:*:*:*:*
Website:
https://www.google.com/
Total vulnerabilities:
9
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
35.1
35.0
34.2
25.9
34.0-rc2
34.0-rc1.1
34.0-hack1
33.0-rc2
33.0-rc1
33-de
32.0-rc2
32.0-rc1
32-de
31.0-rc2
31.0-rc1
31-de
30.0-rc2
30.0-rc1
30-de
29.0-rc3
29.0-rc2
29.0-rc1
29-de
28.0-rc3
28.0-rc2
28.0-rc1
28-de
27.0-rc3
27.0-rc2
27.0-rc1
27-de
26.0-rc3
26.0-rc2
26.0-rc1
26-de
25.0-rc2
25.0-rc1
24.0-rc3
24.0-rc2
24.0-rc1
23.0-rc3
23.0-rc2
23.0-rc1
22.0-rc3
22.0-rc2
22.0-rc1
21.0-rc2
21.0-rc1
6.31.0-rc2
6.31.0-rc1
6.30.0-rc2
6.30.0-rc1
5.34.1
5.34.0-rc2
5.34.0-rc1
5.34.0
5.29.6-cpp
5.29.0-rc3
5.29.0-rc2
5.29.0-rc1
5.28.0-rc3
5.28.0-rc2
5.28.0-rc1
5.27.0-rc3
5.27.0-rc2
5.27.0-rc1
5.26.0-rc3
5.26.0-rc2
5.26.0-rc1
4.33.6
4.33.5
4.33.4
4.33.3
4.33.2
4.33.1
4.33.0-rc2
4.33.0-rc1
4.33.0
4.32.1
4.32.0-rc2
4.32.0-rc1
4.32.0
4.31.0-rc2
4.31.0-rc1
4.30.0-rc2
4.30.0-rc1
4.25.0-rc2
4.25.0-rc1
4.24.0-rc3
4.24.0-rc2
4.24.0-rc1
4.23.0-rc3
4.23.0-rc2
4.23.0-rc1
4.22.0-rc3
4.22.0-rc2
4.22.0-rc1
3.29.6
3.29.0-rc3
3.29.0-rc2
3.29.0-rc1
3.28.0-rc3
3.28.0-rc2
3.28.0-rc1
3.27.0-rc3
3.27.0-rc2
3.27.0-rc1
3.26.0-rc3
3.26.0-rc2
3.26.0-rc1
3.25.0-rc2
3.25.0-rc1
3.24.0-rc3
3.24.0-rc2
3.24.0-rc1
3.23.0-rc3
3.23.0-rc2
3.23.0-rc1
3.22.0-rc3
3.22.0-rc2
3.22.0-rc1
3.21.0-rc2
3.20.1-rc1
3.20.0-rc3
3.20.0-rc2
3.20.0-rc1
3.19.0-rc2
3.19.0-rc1
3.18.0-rc2
3.18.0-rc1
3.17.0-rc2
3.17.0-rc1
3.16.0-rc2
3.16.0-rc1
3.15.0-rc2
3.15.0-rc1
3.14.0-rc3
3.14.0-rc2
3.14.0-rc1
3.13.0-rc3
3.12.0-rc2
3.12.0-rc1
3.11.0-rc2
3.11.0-rc1
3.10.0-rc1
3.9.0-rc1
3.8.0-rc1
3.7.0rc1
3.7.0-rc.3
3.7.0-rc.2
3.6.0rc2
3.6.0rc1
3.4.0rc3
3.4.0rc2
3.4.0rc1
3.3.0rc1
3.2.0rc2
3.2.0-rc.1
3.2.0-alpha-1
3.1.0-alpha-1
3.0.1-jaalite
3.0.0-jaalite
3.0.0-beta-4
3.0.0-beta-3.3
3.0.0-beta-3.2
3.0.0-beta-3.1
3.0.0-beta-3-pre-1
3.0.0-beta-3
3.0.0-beta-2
3.0.0-beta-1.1
3.0.0-beta-1-bzl-fix
3.0.0-beta-1
3.0.0-alpha-4.1
3.0.0-alpha-4
3.0.0-alpha-3.1
3.0.0-alpha-3
3.0.0-alpha-2
3.0.0-alpha-1
2.6.1rc1
34.1
33.6
34.0
29.6
33.5
33.4
33.3
33.2
33.1
33.0
32.1
32.0
31.1
6.31.1
4.31.1
29.5
5.29.5
3.29.5
25.8
4.25.8
3.25.8
31.0
6.31.0
4.31.0
4.25.7
3.25.7
25.7
30.2
6.30.2
4.30.2
29.4
5.29.4
3.29.4
30.1
6.30.1
4.30.1
30.0
6.30.0
4.30.0
25.6
4.25.6
3.25.6
29.3
5.29.3
3.29.3
5.29.2
3.29.2
29.2
29.1
5.29.1
3.29.1
29.0
5.29.0
3.29.0
28.3
5.28.3
3.28.3
28.2
27.5
25.5
5.28.2
5.27.5
4.25.5
3.28.2
3.27.5
3.25.5
5.28.1
3.28.1
28.1
28.0
5.28.0
3.28.0
27.4
5.27.4
3.27.4
27.3
5.27.3
3.27.3
25.4
4.25.4
3.25.4
27.2
5.27.2
3.27.2
27.1
5.27.1
3.27.1
27.0
5.27.0
3.27.0
26.1
5.26.1
3.26.1
26.0
5.26.0
3.26.0
25.3
4.25.3
3.25.3
4.25.2
3.25.2
25.2
25.1
4.25.1
3.25.1
25.0
4.25.0
3.25.0
4.24.4
3.24.4
24.4
4.24.3
3.24.3
24.3
4.24.2
3.24.2
24.2
24.1
4.24.1
3.24.1
24.0
4.24.0
3.24.0
4.23.4
3.23.4
23.4
23.3
4.23.3
3.23.3
23.2
4.23.2
3.23.2
4.23.1
3.23.1
23.1
22.5
4.22.5
3.22.5
23.0
4.23.0
3.23.0
4.22.4
3.22.4
22.4
22.3
4.22.3
3.22.3
22.2
4.22.2
3.22.2
22.1
4.22.1
3.22.1
22.0
4.22.0
3.22.0
21.12
3.21.12
21.11
3.21.11
21.10
3.21.10
21.9
3.21.9
21.8
3.21.8
21.7
3.21.7
3.20.3
3.19.6
3.16.3
21.6
3.21.6
20.2
19.5
18.3
16.2
3.20.2
3.19.5
3.18.3
3.16.2
21.5
3.21.5
21.4
3.21.4
21.3
3.21.3
21.2
3.21.2
21.1
3.21.1
21.0
3.21.0
3.20.1
3.20.0
3.19.4
3.19.3
3.19.2
3.18.2
3.16.1
3.19.1
3.19.0
3.18.1
3.18.0
3.17.3
3.17.2
3.17.1
3.17.0
3.16.0
3.15.8
3.15.7
3.15.6
3.15.5
3.15.4
3.15.3
3.15.2
3.15.1
3.15.0
2.4.1
2.5.0
2.6.0
2.6.1
3.0.0
3.0.2
3.1.0
3.2.0
3.2.1
3.3.0
3.3.1
3.3.2
3.4.0
3.4.1
3.5.0
3.5.0.1
3.5.1
3.5.1.1
3.5.2
3.6.0
3.6.0.1
3.6.1
3.6.1.1
3.6.1.2
3.6.1.3
3.7.0
3.7.1
3.8.0
3.9.0
3.9.1
3.9.2
3.10.0
3.10.1
3.14.0
3.13.0.1
3.13.0
3.12.4
3.12.3
3.12.2
3.11.0
3.11.1
3.11.2
3.11.3
3.11.4
3.12.0
3.12.1
Vulnerabilities (9)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU124260 - Improper input validation CVE-2026-6409 |
CWE-20 | Medium | 4.33.6, 5.34.0 rc1 | 24.03.2026 |
SB2026032406 |
||
| #VU123116 - Uncontrolled Recursion CVE-2026-0994 |
CWE-674 | Medium | 29.6, 33.5 | 20.02.2026 |
SB2026022039 SB2026022040 SB2026022041 and 25 more |
||
| #VU112882 - Uncontrolled Recursion CVE-2025-4565 |
CWE-674 | Medium | 4.25.8, 5.29.5, 6.31.1 | 14.07.2025 |
SB2025071429 SB2025071430 SB2025071431 and 21 more |
||
| #VU97574 - Uncontrolled Recursion CVE-2024-7254 |
CWE-674 | Medium | 3.25.5, 3.27.5, 3.28.2, 4.25.5, 5.27.5, 5.28.2, 25.5, 27.5, 28.2 | 19.09.2024 |
SB2024091904 SB2024100103 SB2024101050 and 90 more |
||
| #VU89143 - Use After Free CVE-2024-2410 |
CWE-416 | High | 4.25.0 | 06.05.2024 |
SB2024050602 |
||
| #VU70097 - Heap-based Buffer Overflow CVE-2015-5237 |
CWE-122 | High | 3.4.0 | 10.12.2022 |
SB2017092512 SB2023011801 SB2023042744 and 7 more |
||
| #VU69670 - Improper input validation CVE-2022-3509 |
CWE-20 | Medium | 3.16.3, 3.19.6, 3.20.3, 3.21.7 | 29.11.2022 |
SB2022111433 SB2022112934 SB2023011787 and 58 more |
||
| #VU69293 - Improper input validation CVE-2022-3171 |
CWE-20 | Medium | 3.16.3, 3.19.6, 3.20.3, 3.21.7 | 14.11.2022 |
SB2022111433 SB2022111440 SB2022112934 and 105 more |
||
| #VU60181 - Resource Management Errors CVE-2021-22569 |
CWE-399 | Medium | 3.19.2 | 31.01.2022 |
SB2022013106 SB2022013107 SB2022041933 and 42 more |