CVE-2024-58103

Summary

Square Wire before 5.2.0 does not enforce a recursion limit on nested groups in ByteArrayProtoReader32.kt and ProtoReader.kt.

Affected Software

Weaknesses

• CWE-674: CWE-674 Uncontrolled Recursion

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://github.com/square/wire/commit/b90e60c09befaff836a2fc2ee4d678451b2ec75d
• https://github.com/square/wire/compare/5.1.0…5.2.0

• ←Previous
• Next→