Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error message. Since the symbol is incorrectly parsed, the file is nullptr. We recommend upgrading to version 3.15.0 or greater.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-protobufUpgrade protobuf-lite-develUpgrade protobuf-develUpgrade protobufUpgrade protobuf-compilerUpgrade protobuf-lite | Nov 14, 2022 | Jan 26, 2022 |
| Alpine Linux | — | Upgrade protobuf | Mar 21, 2024 | Jan 26, 2022 |
| Amazon Linux Ami 2 | — | Upgrade protobuf-javaUpgrade protobuf-staticUpgrade protobuf-compilerUpgrade protobuf-debuginfoUpgrade protobuf-lite-develUpgrade protobuf-lite-staticUpgrade protobuf-liteUpgrade protobuf-develUpgrade protobufUpgrade protobuf-emacs-elUpgrade protobuf-vimUpgrade protobuf-pythonUpgrade protobuf-emacsUpgrade protobuf-javadoc | Feb 7, 2023 | Jan 26, 2022 |
| Amazon_linux | — | Upgrade protobuf | Feb 7, 2023 | Jan 26, 2022 |
| Amazon_linux_2023 | — | Upgrade protobuf-emacsUpgrade protobuf-staticUpgrade python3-protobufUpgrade protobuf-liteUpgrade protobufUpgrade protobuf-compiler-debuginfoUpgrade protobuf-lite-staticUpgrade protobuf-lite-develUpgrade protobuf-vimUpgrade protobuf-lite-debuginfoUpgrade protobuf-develUpgrade protobuf-debuginfoUpgrade protobuf-debugsourceUpgrade protobuf-compiler | Feb 17, 2025 | Jan 26, 2022 |
| Centos_linux | — | Upgrade protobuf-debugsourceUpgrade protobuf-compiler-debuginfoUpgrade protobuf-liteUpgrade protobufUpgrade protobuf-lite-debuginfoUpgrade python3-protobufUpgrade protobuf-debuginfoUpgrade protobuf-compiler | Nov 9, 2022 | Jan 26, 2022 |
| Debian | — | Upgrade protobuf | Apr 19, 2023 | Jan 26, 2022 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Dell Powerstore Dsa2024287 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jul 2, 2024 |
| Freebsd | — | Upgrade mysql80-serverUpgrade mysql80-clientUpgrade mysql57-server | Nov 4, 2022 | Apr 16, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade protobuf-compilerUpgrade protobuf | Jun 7, 2022 | Jan 26, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade protobuf | Aug 18, 2022 | Jan 26, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade protobuf-compilerUpgrade protobuf | Aug 18, 2022 | Jan 26, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade protobuf-compilerUpgrade protobuf | Jun 16, 2022 | Jan 26, 2022 |
| Oracle Mysql | — | Upgrade to MySQL version 8.0.30 | Apr 21, 2026 | Jan 26, 2022 |
| Oracle_linux | — | Upgrade protobufUpgrade protobuf-liteUpgrade python3-protobufUpgrade protobuf-lite-develUpgrade protobuf-compilerUpgrade protobuf-devel | Nov 16, 2022 | Jan 26, 2022 |
| Redhat_linux | — | Upgrade protobuf-debuginfoUpgrade protobuf-develUpgrade protobuf-compilerUpgrade protobuf-lite-develNo solution existsUpgrade protobuf-debugsourceUpgrade protobuf-lite-debuginfoUpgrade protobuf-liteUpgrade protobuf-compiler-debuginfoUpgrade python3-protobufUpgrade protobuf | Nov 9, 2022 | Jan 26, 2022 |
| Rocky_linux | — | Upgrade protobufUpgrade protobuf-debuginfoUpgrade protobuf-compilerUpgrade protobuf-lite-debuginfoUpgrade protobuf-liteUpgrade protobuf-develUpgrade protobuf-compiler-debuginfoUpgrade protobuf-lite-develUpgrade protobuf-debugsource | Mar 12, 2024 | Jan 26, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.7Upgrade Splunk Enterprise to version 9.1.2 | Sep 30, 2025 | Jan 26, 2022 |
| Suse | — | Upgrade libprotobuf15-32bitUpgrade libprotobuf-lite15-32bitUpgrade libprotobuf-lite20-32bitUpgrade python2-protobufUpgrade python3-protobufUpgrade libprotobuf20-32bitUpgrade libprotoc15Upgrade libprotobuf-lite20Upgrade libprotobuf15Upgrade protobuf-sourceUpgrade protobuf-javaUpgrade protobuf-develUpgrade libprotobuf-lite15Upgrade libprotoc15-32bitUpgrade libprotobuf20Upgrade libprotoc20Upgrade libprotoc20-32bit | Mar 19, 2022 | Jan 26, 2022 |
| Ubuntu | — | Upgrade libprotobuf-lite23Upgrade libprotobuf-lite8 (Ubuntu Pro)Upgrade libprotoc23Upgrade libprotobuf23Upgrade python3-protobufUpgrade libprotoc17Upgrade libprotobuf-lite9v5 (Ubuntu Pro)Upgrade libprotoc9v5 (Ubuntu Pro)Upgrade libprotobuf10Upgrade protobuf-compiler (Ubuntu Pro)Upgrade libprotobuf-lite10Upgrade libprotoc-devUpgrade python-protobufUpgrade libprotoc8 (Ubuntu Pro)Upgrade libprotobuf9v5 (Ubuntu Pro)Upgrade libprotobuf8 (Ubuntu Pro)Upgrade libprotobuf-javaUpgrade protobuf-compilerUpgrade libprotobuf-lite17Upgrade libprotoc10 | Mar 22, 2023 | Jan 26, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 26, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub