protobuf-python has a potential Denial of Service issue

SummaryAny project that uses Protobuf pure-Python backend to parse untrusted Protocol Buffers data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion limit.Reporter: Alexis Challande, Trail of Bits...

EUVD-2022-25463

Malicious code in bioql PyPI...

CVE-2022-20203

In multiple locations of the nanopb library, there is a possible way to corrupt memory when decoding untrusted protobuf files. This could lead to local escalation of privilege,with no additional execution privileges needed. User interaction is not needed for exploitation...

Nanopb 缓冲区错误漏洞

Nanopb is a protocol buffer implementation for microprocessors from the individual developer of Nanopb. A security vulnerability exists in Nanopb that stems from a potential memory corruption when decoding an untrusted protobuf file. An attacker can exploit this vulnerability to perform a local...