CVE-2021-22570
1 advisory.
PyPI/protobuf CVE-2021-22570: unknown
Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error me
Action: Upgrade protobuf to 3.15.0 or later.
pip install protobuf==3.15.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.15.0 | - |
Fixed versions
| 3.15.0 |
Sources
- osv: PYSEC-2022-48
- https://github.com/protocolbuffers/protobuf/releases/tag/v3.15.0
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IFX6KPNOFHYD6L4XES5PCM3QNSKZBOTQ/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3DVUZPALAQ34TQP6KFNLM4IZS6B32XSA/
- https://github.com/advisories/GHSA-77rm-9x9h-xj3g
CVE-2021-22570 · published · modified · JSON