CVE-2026-61695 Wire Swift runtime: negative LENGTH_DELIMITED length in skipGroup() crashes any protobuf-decoding service

Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.4.1 and 7.0.0-alpha04, Wire's Swift runtime ProtoReader.skipGroupexpectedEndTag:unknownFieldsWriter: accepts a negative length for a LENGTHDELIMITED field inside an unknown STARTGROUP field...

com.boozallen.aissemble:foundation-data-access (>=1.7.0-rc2, <=1.10.0), org.apache.hive:hive-llap-client (2.3.5) +1 more potentially affected by CVE-2024-23953 via org.apache.hive:hive-llap-common (2.3.5)

org.apache.hive:hive-llap-common MAVEN version 2.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-llap-common and may be impacted: - com.boozallen.aissemble:foundation-data-access =1.7.0-rc2, =1.10.0 -...