Approved changes feed: RSS · Atom

cpe:2.3:a:google:protobuf:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorGoogle (f181d1eb-7269-5bae-b76e-e66ceb214562)
ProductProtobuf (36a26aeb-c403-5f1e-92c7-3c6bb12ac969)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/protobuf purl2cpe 2026-06-01 10:16:37.924125
pkg:deb/ubuntu/protobuf purl2cpe 2026-06-01 10:16:37.924127
pkg:gem/google-protobuf purl2cpe 2026-06-01 10:16:37.924128
pkg:github/protocolbuffers/protobuf purl2cpe 2026-06-01 10:16:37.924129
pkg:googlesource/protobuf purl2cpe 2026-06-01 10:16:37.924131
pkg:maven/com.google.protobuf/protobuf-java purl2cpe 2026-06-01 10:16:37.924132
pkg:nuget/Google.Protobuf purl2cpe 2026-06-01 10:16:37.924134
pkg:pypi/protobuf purl2cpe 2026-06-01 10:16:37.924135
pkg:rpm/centos/protobuf purl2cpe 2026-06-01 10:16:37.924136
pkg:rpm/fedora/protobuf purl2cpe 2026-06-01 10:16:37.924138
pkg:rpm/opensuse/protobuf purl2cpe 2026-06-01 10:16:37.924139
pkg:sourceforge/protocol-buffers.mirror purl2cpe 2026-06-01 10:16:37.924140

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-2410 vulnerable 2026-06-08 06:33:31.048644 Use after free in C++ protobuf
HIGH (7.6)
The JsonToBinaryStream() function is part of the protocol buffers C++ implementation and is used to parse JSON from a stream. If the input is broken up into separate chunks in a certain way, the parser will attempt to read bytes from a chunk that has already been freed. 
Published: 2024-05-03T12:58:39.449Z
Updated: 2024-08-01T19:11:53.511Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.