Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error message. Since the symbol is incorrectly parsed, the file is nullptr. We recommend upgrading to version 3.15.0 or greater.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-protobufUpgrade protobuf-lite-develUpgrade protobufUpgrade protobuf-compilerUpgrade protobuf-liteUpgrade protobuf-devel | Nov 14, 2022 | Jan 26, 2022 |
| Alpine Linux | — | Upgrade protobuf | Mar 21, 2024 | Jan 26, 2022 |
| Amazon Linux Ami 2 | — | Upgrade protobuf-emacsUpgrade protobuf-lite-staticUpgrade protobufUpgrade protobuf-vimUpgrade protobuf-develUpgrade protobuf-javadocUpgrade protobuf-pythonUpgrade protobuf-emacs-elUpgrade protobuf-lite-develUpgrade protobuf-liteUpgrade protobuf-javaUpgrade protobuf-compilerUpgrade protobuf-debuginfoUpgrade protobuf-static | Feb 7, 2023 | Jan 26, 2022 |
| Amazon_linux | — | Upgrade protobuf | Feb 7, 2023 | Jan 26, 2022 |
| Amazon_linux_2023 | — | Upgrade protobuf-compiler-debuginfoUpgrade protobuf-liteUpgrade protobuf-emacsUpgrade protobuf-staticUpgrade python3-protobufUpgrade protobufUpgrade protobuf-lite-staticUpgrade protobuf-debuginfoUpgrade protobuf-vimUpgrade protobuf-compilerUpgrade protobuf-debugsourceUpgrade protobuf-lite-develUpgrade protobuf-develUpgrade protobuf-lite-debuginfo | Feb 17, 2025 | Jan 26, 2022 |
| Centos_linux | — | Upgrade protobuf-liteUpgrade protobuf-compiler-debuginfoUpgrade protobufUpgrade protobuf-debugsourceUpgrade python3-protobufUpgrade protobuf-debuginfoUpgrade protobuf-lite-debuginfoUpgrade protobuf-compiler | Nov 9, 2022 | Jan 26, 2022 |
| Debian | — | Upgrade protobuf | Apr 19, 2023 | Jan 26, 2022 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Dell Powerstore Dsa2024287 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jul 2, 2024 |
| Freebsd | — | Upgrade mysql57-serverUpgrade mysql80-serverUpgrade mysql80-client | Nov 4, 2022 | Apr 16, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade protobufUpgrade protobuf-compiler | Jun 7, 2022 | Jan 26, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade protobuf | Aug 18, 2022 | Jan 26, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade protobuf-compilerUpgrade protobuf | Aug 18, 2022 | Jan 26, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade protobufUpgrade protobuf-compiler | Jun 16, 2022 | Jan 26, 2022 |
| Oracle Mysql | — | Upgrade to MySQL version 8.0.30 | Apr 21, 2026 | Jan 26, 2022 |
| Oracle_linux | — | Upgrade python3-protobufUpgrade protobufUpgrade protobuf-liteUpgrade protobuf-lite-develUpgrade protobuf-compilerUpgrade protobuf-devel | Nov 16, 2022 | Jan 26, 2022 |
| Redhat_linux | — | Upgrade protobuf-compiler-debuginfoUpgrade python3-protobufUpgrade protobufUpgrade protobuf-liteUpgrade protobuf-compilerUpgrade protobuf-debuginfoUpgrade protobuf-lite-debuginfoNo solution existsUpgrade protobuf-debugsourceUpgrade protobuf-develUpgrade protobuf-lite-devel | Nov 9, 2022 | Jan 26, 2022 |
| Rocky_linux | — | Upgrade protobuf-lite-debuginfoUpgrade protobuf-liteUpgrade protobuf-debuginfoUpgrade protobuf-develUpgrade protobufUpgrade protobuf-compilerUpgrade protobuf-lite-develUpgrade protobuf-debugsourceUpgrade protobuf-compiler-debuginfo | Mar 12, 2024 | Jan 26, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.7Upgrade Splunk Enterprise to version 9.1.2 | Sep 30, 2025 | Jan 26, 2022 |
| Suse | — | Upgrade libprotobuf15-32bitUpgrade libprotobuf20-32bitUpgrade libprotobuf-lite15-32bitUpgrade libprotoc15Upgrade libprotobuf-lite20-32bitUpgrade python3-protobufUpgrade python2-protobufUpgrade libprotobuf-lite20Upgrade libprotobuf-lite15Upgrade protobuf-javaUpgrade libprotobuf20Upgrade libprotoc20Upgrade protobuf-sourceUpgrade protobuf-develUpgrade libprotobuf15Upgrade libprotoc15-32bitUpgrade libprotoc20-32bit | Mar 19, 2022 | Jan 26, 2022 |
| Ubuntu | — | Upgrade python3-protobufUpgrade libprotoc8 (Ubuntu Pro)Upgrade libprotoc17Upgrade libprotobuf-lite10Upgrade libprotobuf23Upgrade python-protobufUpgrade libprotobuf-lite9v5 (Ubuntu Pro)Upgrade libprotoc9v5 (Ubuntu Pro)Upgrade libprotobuf-lite23Upgrade libprotobuf-lite8 (Ubuntu Pro)Upgrade libprotoc-devUpgrade protobuf-compiler (Ubuntu Pro)Upgrade libprotobuf10Upgrade libprotoc23Upgrade libprotoc10Upgrade libprotobuf8 (Ubuntu Pro)Upgrade protobuf-compilerUpgrade libprotobuf-lite17Upgrade libprotobuf9v5 (Ubuntu Pro)Upgrade libprotobuf-java | Mar 22, 2023 | Jan 26, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 26, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub