ai.cheq.sst.android:cheq-sst-kotlin-protobuf (>=0.1.0, <=0.1.3), at.asitplus:warden (>=2.1.0, <=2.3.1) +48 more potentially affected by CVE-2024-7254 via com.google.protobuf:protobuf-javalite (>=4.0.0-rc-2, <=4.27.4)

com.google.protobuf:protobuf-javalite MAVEN version =4.0.0-rc-2, =0.1.0, =2.1.0, =1.6.0, =4.26.0, =0.29.1, =0.6.0, =0.1.0-alpha, =0.10.13, =0.10.13, =0.10.13, =0.10.13, =0.10.13, =0.10.13, =1.1.0, =1.1.1 and more Source cves: CVE-2024-7254 Source advisory: OSV:GHSA-735F-PC8J-V9W8...

build.buf:protobuf-javalite (>=4.28.0, <=4.28.1), com.auroraoss:gplayapi (3.4.2) +1 more potentially affected by CVE-2024-7254 via com.google.protobuf:protobuf-javalite (>=4.28.0-rc1, <=4.28.1)

com.google.protobuf:protobuf-javalite MAVEN version =4.28.0-rc1, =4.28.0, =4.28.0-rc1, =4.28.1 Source cves: CVE-2024-7254 Source advisory: OSV:GHSA-735F-PC8J-V9W8...

build.buf:protobuf-javalite (>=4.28.0, <=4.28.1), com.auroraoss:gplayapi (3.4.2) +1 more potentially affected by CVE-2024-7254 via com.google.protobuf:protobuf-javalite (>=4.28.0-rc1, <=4.28.1)

com.google.protobuf:protobuf-javalite MAVEN version =4.28.0-rc1, =4.28.0, =4.28.0-rc1, =4.28.1 Source cves: CVE-2024-7254 Source advisory: GHSA-735F-PC8J-V9W8...

ai.cheq.sst.android:cheq-sst-kotlin-protobuf (>=0.1.0, <=0.1.3), at.asitplus:warden (>=2.1.0, <=2.3.1) +48 more potentially affected by CVE-2024-7254 via com.google.protobuf:protobuf-javalite (>=4.0.0-rc-2, <=4.27.4)

com.google.protobuf:protobuf-javalite MAVEN version =4.0.0-rc-2, =0.1.0, =2.1.0, =1.6.0, =4.26.0, =0.29.1, =0.6.0, =0.1.0-alpha, =0.10.13, =0.10.13, =0.10.13, =0.10.13, =0.10.13, =0.10.13, =1.1.0, =1.1.1 and more Source cves: CVE-2024-7254 Source advisory: GHSA-735F-PC8J-V9W8...

protobuf-java has potential Denial of Service issue

Summary When parsing unknown fields in the Protobuf Java Lite and Full library, a maliciously crafted message can cause a StackOverflow error and lead to a program crash. Reporter: Alexis Challande, Trail of Bits Ecosystem Security Team Affected versions: This issue affects all versions of both t...

build.buf:protobuf-javalite (>=4.28.0, <=4.28.1), com.auroraoss:gplayapi (3.4.2) +1 more potentially affected by CVE-2024-7254 via com.google.protobuf:protobuf-javalite (>=4.28.0-rc1, <=4.28.1)

com.google.protobuf:protobuf-javalite MAVEN version =4.28.0-rc1, =4.28.0, =4.28.0-rc1, =4.28.1 Source cves: CVE-2024-7254 Source advisory: SNYK:JAVA-COMGOOGLEPROTOBUF-9398723...

ai.edgestore:engine (1.0.1-alpha03), androidx.health:health-connect-client (>=1.0.0-alpha01, <=1.0.0-alpha02) +332 more potentially affected by CVE-2024-7254 via com.google.protobuf:protobuf-javalite (>=3.8.0, <=3.25.4)

com.google.protobuf:protobuf-javalite MAVEN version =3.8.0, =1.0.0-alpha01, =1.0.0-alpha02, =1.11.0-alpha01, =1.0.0-alpha01, =1.0.0-alpha01, =1.0.0-alpha01, =1.0.0-alpha01, =1.5.0, =2.0.1, =1.14.0, =1.16.2 - build.buf.prototype:connect-kotlin-protoc-gen-javalite-ext v0.0.0-test0120 and more Sourc...

ai.cheq.sst.android:cheq-sst-kotlin-protobuf (>=0.1.0, <=0.1.3), at.asitplus:warden (>=2.1.0, <=2.3.1) +48 more potentially affected by CVE-2024-7254 via com.google.protobuf:protobuf-javalite (>=4.0.0-rc-2, <=4.27.4)

com.google.protobuf:protobuf-javalite MAVEN version =4.0.0-rc-2, =0.1.0, =2.1.0, =1.6.0, =4.26.0, =0.29.1, =0.6.0, =0.1.0-alpha, =0.10.13, =0.10.13, =0.10.13, =0.10.13, =0.10.13, =0.10.13, =1.1.0, =1.1.1 and more Source cves: CVE-2024-7254 Source advisory: MEND:CVE-2024-7254...

be.zvz:kotlininside (>=1.14.0, <=1.14.6), com.google.protobuf:protobuf-kotlin-lite (>=3.20.0, <=3.20.2) +8 more potentially affected by CVE-2022-3509 via com.google.protobuf:protobuf-javalite (>=3.20.0, <=3.20.2)

com.google.protobuf:protobuf-javalite MAVEN version =3.20.0, =1.14.0, =3.20.0, =2.12.0, =2.12.0, =2.3.0, =0.2.4, =0.2.6 - io.github.dimensiondev:maskwalletcore 0.5.0 Source cves: CVE-2022-3509 Source advisory: GHSA-G5WW-5JH7-63CX...

com.google.ambient.crossdevice:crossdevice (0.1.0-preview01), com.google.protobuf:protobuf-kotlin-lite (>=3.21.0, <=3.21.6) +12 more potentially affected by CVE-2022-3509 via com.google.protobuf:protobuf-javalite (>=3.21.0, <=3.21.6)

com.google.protobuf:protobuf-javalite MAVEN version =3.21.0, =3.21.0, =2.15.0, =2.15.0, =0.4.6, =0.4.6, =0.4.6, =0.4.6, =7.3.0, =7.3.0, =0.3.1, =0.3.5, =1.48.0, =1.49.1 Source cves: CVE-2022-3509 Source advisory: GHSA-G5WW-5JH7-63CX...

be.zvz:kotlininside (>=1.14.0, <=1.14.6), com.google.protobuf:protobuf-kotlin-lite (>=3.20.0, <=3.20.2) +8 more potentially affected by CVE-2022-3510 via com.google.protobuf:protobuf-javalite (>=3.20.0, <=3.20.2)

com.google.protobuf:protobuf-javalite MAVEN version =3.20.0, =1.14.0, =3.20.0, =2.12.0, =2.12.0, =2.3.0, =0.2.4, =0.2.6 - io.github.dimensiondev:maskwalletcore 0.5.0 Source cves: CVE-2022-3510 Source advisory: OSV:GHSA-4GG5-VX3J-XWC7...

be.zvz:kotlininside (>=1.14.0, <=1.14.6), com.google.protobuf:protobuf-kotlin-lite (>=3.20.0, <=3.20.2) +8 more potentially affected by CVE-2022-3510 via com.google.protobuf:protobuf-javalite (>=3.20.0, <=3.20.2)

com.google.protobuf:protobuf-javalite MAVEN version =3.20.0, =1.14.0, =3.20.0, =2.12.0, =2.12.0, =2.3.0, =0.2.4, =0.2.6 - io.github.dimensiondev:maskwalletcore 0.5.0 Source cves: CVE-2022-3510 Source advisory: GHSA-4GG5-VX3J-XWC7...

ai.edgestore:engine (1.0.1-alpha03), androidx.health:health-connect-client (>=1.0.0-alpha01, <=1.0.0-alpha02) +132 more potentially affected by CVE-2022-3510 via com.google.protobuf:protobuf-javalite (>=3.17.0, <=3.19.5)

com.google.protobuf:protobuf-javalite MAVEN version =3.17.0, =1.0.0-alpha01, =2022.12, =2022.12, =7.0.2110, =1.0.0, =0.16.1, =0.16.3.1 and more Source cves: CVE-2022-3510 Source advisory: GHSA-4GG5-VX3J-XWC7...

androidx.health:health-services-client (>=1.0.0-alpha02, <=1.0.0-alpha03), androidx.security:security-crypto (1.0.0-rc01) +76 more potentially affected by CVE-2022-3510 via com.google.protobuf:protobuf-javalite (>=3.8.0, <=3.15.5)

com.google.protobuf:protobuf-javalite MAVEN version =3.8.0, =1.0.0-alpha02, =1.1.18, =1.1, =2.15.3unofficial1, =2.15.3unofficial1, =0.2.35-snapshot, =1.3.0-rc2, =21.5.0, =25.1.2 and more Source cves: CVE-2022-3510 Source advisory: GHSA-4GG5-VX3J-XWC7...

com.google.ambient.crossdevice:crossdevice (0.1.0-preview01), com.google.protobuf:protobuf-kotlin-lite (>=3.21.0, <=3.21.6) +12 more potentially affected by CVE-2022-3510 via com.google.protobuf:protobuf-javalite (>=3.21.0, <=3.21.6)

com.google.protobuf:protobuf-javalite MAVEN version =3.21.0, =3.21.0, =2.15.0, =2.15.0, =0.4.6, =0.4.6, =0.4.6, =0.4.6, =7.3.0, =7.3.0, =0.3.1, =0.3.5, =1.48.0, =1.49.1 Source cves: CVE-2022-3510 Source advisory: GHSA-4GG5-VX3J-XWC7...

com.google.ambient.crossdevice:crossdevice (0.1.0-preview01), com.google.protobuf:protobuf-kotlin-lite (>=3.21.0, <=3.21.6) +12 more potentially affected by CVE-2022-3510 via com.google.protobuf:protobuf-javalite (>=3.21.0, <=3.21.6)

com.google.protobuf:protobuf-javalite MAVEN version =3.21.0, =3.21.0, =2.15.0, =2.15.0, =0.4.6, =0.4.6, =0.4.6, =0.4.6, =7.3.0, =7.3.0, =0.3.1, =0.3.5, =1.48.0, =1.49.1 Source cves: CVE-2022-3510 Source advisory: OSV:GHSA-4GG5-VX3J-XWC7...

androidx.health:health-services-client (>=1.0.0-alpha02, <=1.0.0-alpha03), androidx.security:security-crypto (1.0.0-rc01) +76 more potentially affected by CVE-2022-3509 via com.google.protobuf:protobuf-javalite (>=3.8.0, <=3.15.5)

com.google.protobuf:protobuf-javalite MAVEN version =3.8.0, =1.0.0-alpha02, =1.1.18, =1.1, =2.15.3unofficial1, =2.15.3unofficial1, =0.2.35-snapshot, =1.3.0-rc2, =21.5.0, =25.1.2 and more Source cves: CVE-2022-3509 Source advisory: GHSA-G5WW-5JH7-63CX...

be.zvz:kotlininside (>=1.14.0, <=1.14.6), com.google.protobuf:protobuf-kotlin-lite (>=3.20.0, <=3.20.2) +8 more potentially affected by CVE-2022-3509 via com.google.protobuf:protobuf-javalite (>=3.20.0, <=3.20.2)

com.google.protobuf:protobuf-javalite MAVEN version =3.20.0, =1.14.0, =3.20.0, =2.12.0, =2.12.0, =2.3.0, =0.2.4, =0.2.6 - io.github.dimensiondev:maskwalletcore 0.5.0 Source cves: CVE-2022-3509 Source advisory: OSV:GHSA-G5WW-5JH7-63CX...

com.google.ambient.crossdevice:crossdevice (0.1.0-preview01), com.google.protobuf:protobuf-kotlin-lite (>=3.21.0, <=3.21.6) +12 more potentially affected by CVE-2022-3509 via com.google.protobuf:protobuf-javalite (>=3.21.0, <=3.21.6)

com.google.protobuf:protobuf-javalite MAVEN version =3.21.0, =3.21.0, =2.15.0, =2.15.0, =0.4.6, =0.4.6, =0.4.6, =0.4.6, =7.3.0, =7.3.0, =0.3.1, =0.3.5, =1.48.0, =1.49.1 Source cves: CVE-2022-3509 Source advisory: OSV:GHSA-G5WW-5JH7-63CX...

com.google.ambient.crossdevice:crossdevice (0.1.0-preview01), com.google.protobuf:protobuf-kotlin-lite (>=3.21.0, <=3.21.6) +12 more potentially affected by CVE-2022-3510 via com.google.protobuf:protobuf-javalite (>=3.21.0, <=3.21.6)

com.google.protobuf:protobuf-javalite MAVEN version =3.21.0, =3.21.0, =2.15.0, =2.15.0, =0.4.6, =0.4.6, =0.4.6, =0.4.6, =7.3.0, =7.3.0, =0.3.1, =0.3.5, =1.48.0, =1.49.1 Source cves: CVE-2022-3510 Source advisory: MEND:CVE-2022-3510...