Lucene search

K
cvelistGoCVELIST:CVE-2024-24786
HistoryMar 05, 2024 - 10:22 p.m.

CVE-2024-24786 Infinite loop in JSON unmarshaling in google.golang.org/protobuf

2024-03-0522:22:35
Go
raw.githubusercontent.com
4
cve-2024-24786
protojson.unmarshal
infinite loop
json unmarshaling
google.protobuf.any value
unmarshaloptions.discardunknown

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.1%

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.