CVE-2026-110747

The jackson-dataformat-protobuf library is vulnerable to an integer overflow in the ProtobufParser._readStringKey() method. When processing a protobuf map entry, the parser reads the length prefix of a string key into an attacker-controlled int and performs a bounds check using signed arithmetic....

CVE-2026-104016

The jackson-dataformat-protobuf library is vulnerable to a signed integer overflow within the ProtobufParser component when processing length-prefixed protobuf string and bytes fields. Specifically, when an attacker provides a varint decoding with a length near Integer.MAX_VALUE , the arithmetic ...