ai.cheq.sst.android:cheq-sst-kotlin-protobuf (>=0.1.0, <=0.1.3), com.android.designcompose:common (>=0.29.1, <=0.30.0) +1 more potentially affected by CVE-2024-7254 via com.google.protobuf:protobuf-kotlin-lite (>=4.26.0, <=4.27.3)

com.google.protobuf:protobuf-kotlin-lite MAVEN version =4.26.0, =0.1.0, =0.29.1, =0.6.0, =0.7.0 Source cves: CVE-2024-7254 Source advisory: GHSA-735F-PC8J-V9W8...

be.zvz:kotlininside (>=1.14.0, <=1.16.2), com.connectrpc:connect-kotlin-google-javalite-ext (>=0.2.0, <=0.5.1) +14 more potentially affected by CVE-2024-7254 via com.google.protobuf:protobuf-kotlin-lite (>=3.17.1, <=3.25.3)

com.google.protobuf:protobuf-kotlin-lite MAVEN version =3.17.1, =1.14.0, =0.2.0, =16.0.0-alpha01, =7.7.1, =7.7.1, =0.2.19-alpha.3, =2.1.23, =0.1.0, =0.3.1, =0.1.1, =0.1.1, =3.23.2, =0.100.0, =0.138.1 and more Source cves: CVE-2024-7254 Source advisory: GHSA-735F-PC8J-V9W8...

ai.cheq.sst.android:cheq-sst-kotlin-protobuf (>=0.1.0, <=0.1.3), com.android.designcompose:common (>=0.29.1, <=0.30.0) +1 more potentially affected by CVE-2024-7254 via com.google.protobuf:protobuf-kotlin-lite (>=4.26.0, <=4.27.3)

com.google.protobuf:protobuf-kotlin-lite MAVEN version =4.26.0, =0.1.0, =0.29.1, =0.6.0, =0.7.0 Source cves: CVE-2024-7254 Source advisory: OSV:GHSA-735F-PC8J-V9W8...

protobuf-java has potential Denial of Service issue

Summary When parsing unknown fields in the Protobuf Java Lite and Full library, a maliciously crafted message can cause a StackOverflow error and lead to a program crash. Reporter: Alexis Challande, Trail of Bits Ecosystem Security Team Affected versions: This issue affects all versions of both t...

GHSA-735F-PC8J-V9W8 protobuf-java has potential Denial of Service issue

Summary When parsing unknown fields in the Protobuf Java Lite and Full library, a maliciously crafted message can cause a StackOverflow error and lead to a program crash. Reporter: Alexis Challande, Trail of Bits Ecosystem Security Team Affected versions: This issue affects all versions of both t...

be.zvz:kotlininside (>=1.14.0, <=1.16.2), com.connectrpc:connect-kotlin-google-javalite-ext (>=0.2.0, <=0.5.1) +14 more potentially affected by CVE-2024-7254 via com.google.protobuf:protobuf-kotlin-lite (>=3.17.1, <=3.25.3)

com.google.protobuf:protobuf-kotlin-lite MAVEN version =3.17.1, =1.14.0, =0.2.0, =16.0.0-alpha01, =7.7.1, =7.7.1, =0.2.19-alpha.3, =2.1.23, =0.1.0, =0.3.1, =0.1.1, =0.1.1, =3.23.2, =0.100.0, =0.138.1 and more Source cves: CVE-2024-7254 Source advisory: MEND:CVE-2024-7254...

ai.cheq.sst.android:cheq-sst-kotlin-protobuf (>=0.1.0, <=0.1.3), com.android.designcompose:common (>=0.29.1, <=0.30.0) +1 more potentially affected by CVE-2024-7254 via com.google.protobuf:protobuf-kotlin-lite (>=4.26.0, <=4.27.3)

com.google.protobuf:protobuf-kotlin-lite MAVEN version =4.26.0, =0.1.0, =0.29.1, =0.6.0, =0.7.0 Source cves: CVE-2024-7254 Source advisory: MEND:CVE-2024-7254...

com.google.ambient.crossdevice:crossdevice (0.1.0-preview01), com.google.protobuf:protobuf-kotlin-lite (>=3.21.0, <=3.21.6) +12 more potentially affected by CVE-2022-3510 via com.google.protobuf:protobuf-javalite (>=3.21.0, <=3.21.6)

com.google.protobuf:protobuf-javalite MAVEN version =3.21.0, =3.21.0, =2.15.0, =2.15.0, =0.4.6, =0.4.6, =0.4.6, =0.4.6, =7.3.0, =7.3.0, =0.3.1, =0.3.5, =1.48.0, =1.49.1 Source cves: CVE-2022-3510 Source advisory: OSV:GHSA-4GG5-VX3J-XWC7...

be.zvz:kotlininside (>=1.14.0, <=1.14.6), com.google.protobuf:protobuf-kotlin-lite (>=3.20.0, <=3.20.2) +8 more potentially affected by CVE-2022-3509 via com.google.protobuf:protobuf-javalite (>=3.20.0, <=3.20.2)

com.google.protobuf:protobuf-javalite MAVEN version =3.20.0, =1.14.0, =3.20.0, =2.12.0, =2.12.0, =2.3.0, =0.2.4, =0.2.6 - io.github.dimensiondev:maskwalletcore 0.5.0 Source cves: CVE-2022-3509 Source advisory: OSV:GHSA-G5WW-5JH7-63CX...

be.zvz:kotlininside (>=1.14.0, <=1.14.6), com.google.protobuf:protobuf-kotlin-lite (>=3.20.0, <=3.20.2) +8 more potentially affected by CVE-2022-3510 via com.google.protobuf:protobuf-javalite (>=3.20.0, <=3.20.2)

com.google.protobuf:protobuf-javalite MAVEN version =3.20.0, =1.14.0, =3.20.0, =2.12.0, =2.12.0, =2.3.0, =0.2.4, =0.2.6 - io.github.dimensiondev:maskwalletcore 0.5.0 Source cves: CVE-2022-3510 Source advisory: MEND:CVE-2022-3510...

be.zvz:kotlininside (>=1.14.0, <=1.14.6), io.github.dimensiondev:maskwalletcore (0.5.0) potentially affected by CVE-2022-3171 via com.google.protobuf:protobuf-kotlin-lite (>=3.20.0, <=3.20.1)

com.google.protobuf:protobuf-kotlin-lite MAVEN version =3.20.0, =1.14.0, =1.14.6 - io.github.dimensiondev:maskwalletcore 0.5.0 Source cves: CVE-2022-3171 Source advisory: MEND:CVE-2022-3171...

io.github.dimensiondev:maskwalletcore (>=0.1.0, <=0.4.1) potentially affected by CVE-2022-3171 via com.google.protobuf:protobuf-kotlin-lite (>=3.17.1, <=3.17.3)

com.google.protobuf:protobuf-kotlin-lite MAVEN version =3.17.1, =0.1.0, =0.4.1 Source cves: CVE-2022-3171 Source advisory: MEND:CVE-2022-3171...

com.google.ambient.crossdevice:crossdevice (0.1.0-preview01), com.google.protobuf:protobuf-kotlin-lite (>=3.21.0-rc-1, <=3.21.6) +12 more potentially affected by CVE-2022-3171 via com.google.protobuf:protobuf-javalite (>=3.21.0-rc-1, <=3.21.6)

com.google.protobuf:protobuf-javalite MAVEN version =3.21.0-rc-1, =3.21.0-rc-1, =2.15.0, =2.15.0, =0.4.6, =0.4.6, =0.4.6, =0.4.6, =7.3.0, =7.3.0, =0.3.1, =0.3.5, =1.48.0, =1.49.1 Source cves: CVE-2022-3171 Source advisory: MEND:CVE-2022-3171...

com.google.ambient.crossdevice:crossdevice (0.1.0-preview01), dev.franckyi.kbuttplug:kbuttplug (0.2.2) potentially affected by CVE-2022-3171 via com.google.protobuf:protobuf-kotlin-lite (>=3.21.2, <=3.21.3)

com.google.protobuf:protobuf-kotlin-lite MAVEN version =3.21.2, =3.21.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.protobuf:protobuf-kotlin-lite and may be impacted: - com.google.ambient.crossdevice:crossdevice 0.1.0-preview01 -...

io.github.dimensiondev:maskwalletcore (>=0.1.0, <=0.4.1) potentially affected by CVE-2022-3171 via com.google.protobuf:protobuf-kotlin-lite (>=3.17.1, <=3.17.3)

com.google.protobuf:protobuf-kotlin-lite MAVEN version =3.17.1, =0.1.0, =0.4.1 Source cves: CVE-2022-3171 Source advisory: OSV:GHSA-H4H5-3HR4-J3G2...

io.github.dimensiondev:maskwalletcore (>=0.1.0, <=0.4.1) potentially affected by CVE-2022-3171 via com.google.protobuf:protobuf-kotlin-lite (>=3.17.1, <=3.17.3)

com.google.protobuf:protobuf-kotlin-lite MAVEN version =3.17.1, =0.1.0, =0.4.1 Source cves: CVE-2022-3171 Source advisory: GHSA-H4H5-3HR4-J3G2...

be.zvz:kotlininside (>=1.14.0, <=1.14.6), io.github.dimensiondev:maskwalletcore (0.5.0) potentially affected by CVE-2022-3171 via com.google.protobuf:protobuf-kotlin-lite (>=3.20.0, <=3.20.1)

com.google.protobuf:protobuf-kotlin-lite MAVEN version =3.20.0, =1.14.0, =1.14.6 - io.github.dimensiondev:maskwalletcore 0.5.0 Source cves: CVE-2022-3171 Source advisory: GHSA-H4H5-3HR4-J3G2...

com.google.ambient.crossdevice:crossdevice (0.1.0-preview01), dev.franckyi.kbuttplug:kbuttplug (0.2.2) potentially affected by CVE-2022-3171 via com.google.protobuf:protobuf-kotlin-lite (>=3.21.2, <=3.21.3)

com.google.protobuf:protobuf-kotlin-lite MAVEN version =3.21.2, =3.21.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.protobuf:protobuf-kotlin-lite and may be impacted: - com.google.ambient.crossdevice:crossdevice 0.1.0-preview01 -...

com.google.ambient.crossdevice:crossdevice (0.1.0-preview01), dev.franckyi.kbuttplug:kbuttplug (0.2.2) potentially affected by CVE-2022-3171 via com.google.protobuf:protobuf-kotlin-lite (>=3.21.2, <=3.21.3)

com.google.protobuf:protobuf-kotlin-lite MAVEN version =3.21.2, =3.21.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.protobuf:protobuf-kotlin-lite and may be impacted: - com.google.ambient.crossdevice:crossdevice 0.1.0-preview01 -...

be.zvz:kotlininside (>=1.14.0, <=1.14.6), io.github.dimensiondev:maskwalletcore (0.5.0) potentially affected by CVE-2022-3171 via com.google.protobuf:protobuf-kotlin-lite (>=3.20.0, <=3.20.1)

com.google.protobuf:protobuf-kotlin-lite MAVEN version =3.20.0, =1.14.0, =1.14.6 - io.github.dimensiondev:maskwalletcore 0.5.0 Source cves: CVE-2022-3171 Source advisory: OSV:GHSA-H4H5-3HR4-J3G2...