CVE-2022-3509

CVE-2022-3509 concerns a parsing issue in protobuf-java (core and lite) textformat that, on inputs with multiple non-repeated embedded messages and repeated/unknown fields, can cause objects to flip between mutable/immutable forms and trigger long GC pauses, enabling a denial-of-service condition...

CVE-2022-3510

CVE-2022-3510 summary and remediation (connected sources) : A parsing issue in protobuf-java core and lite triggers a denial-of-service when inputs contain multiple non-repeated embedded messages with repeated/unknown fields, causing objects to flip between mutable and immutable forms and potenti...