Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error message. Since the symbol is incorrectly parsed, the file is nullptr. We recommend upgrading to version 3.15.0 or greater.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade protobuf-compilerUpgrade protobuf-liteUpgrade protobuf-lite-develUpgrade protobufUpgrade protobuf-develUpgrade python3-protobuf | Nov 14, 2022 | Jan 26, 2022 |
| Alpine Linux | — | Upgrade protobuf | Mar 21, 2024 | Jan 26, 2022 |
| Amazon Linux Ami 2 | — | Upgrade protobuf-emacsUpgrade protobuf-vimUpgrade protobuf-emacs-elUpgrade protobuf-lite-staticUpgrade protobuf-lite-develUpgrade protobuf-javadocUpgrade protobuf-pythonUpgrade protobuf-develUpgrade protobuf-liteUpgrade protobufUpgrade protobuf-debuginfoUpgrade protobuf-compilerUpgrade protobuf-javaUpgrade protobuf-static | Feb 7, 2023 | Jan 26, 2022 |
| Amazon_linux | — | Upgrade protobuf | Feb 7, 2023 | Jan 26, 2022 |
| Amazon_linux_2023 | — | Upgrade protobufUpgrade protobuf-staticUpgrade protobuf-liteUpgrade protobuf-emacsUpgrade protobuf-compiler-debuginfoUpgrade python3-protobufUpgrade protobuf-lite-develUpgrade protobuf-debuginfoUpgrade protobuf-lite-staticUpgrade protobuf-vimUpgrade protobuf-compilerUpgrade protobuf-debugsourceUpgrade protobuf-develUpgrade protobuf-lite-debuginfo | Feb 17, 2025 | Jan 26, 2022 |
| Centos_linux | — | Upgrade protobuf-liteUpgrade protobuf-compiler-debuginfoUpgrade protobuf-debugsourceUpgrade protobufUpgrade python3-protobufUpgrade protobuf-debuginfoUpgrade protobuf-lite-debuginfoUpgrade protobuf-compiler | Nov 9, 2022 | Jan 26, 2022 |
| Debian | — | Upgrade protobuf | Apr 19, 2023 | Jan 26, 2022 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Dell Powerstore Dsa2024287 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jul 2, 2024 |
| Freebsd | — | Upgrade mysql80-serverUpgrade mysql57-serverUpgrade mysql80-client | Nov 4, 2022 | Apr 16, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade protobuf-compilerUpgrade protobuf | Jun 7, 2022 | Jan 26, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade protobuf | Aug 18, 2022 | Jan 26, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade protobufUpgrade protobuf-compiler | Aug 18, 2022 | Jan 26, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade protobuf-compilerUpgrade protobuf | Jun 16, 2022 | Jan 26, 2022 |
| Oracle Mysql | — | Upgrade to MySQL version 8.0.30 | Apr 21, 2026 | Jan 26, 2022 |
| Oracle_linux | — | Upgrade protobuf-lite-develUpgrade protobuf-develUpgrade protobuf-compilerUpgrade protobuf-liteUpgrade protobufUpgrade python3-protobuf | Nov 16, 2022 | Jan 26, 2022 |
| Redhat_linux | — | Upgrade protobuf-compiler-debuginfoUpgrade python3-protobufUpgrade protobufUpgrade protobuf-liteNo solution existsUpgrade protobuf-debugsourceUpgrade protobuf-lite-debuginfoUpgrade protobuf-develUpgrade protobuf-compilerUpgrade protobuf-lite-develUpgrade protobuf-debuginfo | Nov 9, 2022 | Jan 26, 2022 |
| Rocky_linux | — | Upgrade protobuf-compilerUpgrade protobuf-debuginfoUpgrade protobufUpgrade protobuf-develUpgrade protobuf-lite-debuginfoUpgrade protobuf-liteUpgrade protobuf-debugsourceUpgrade protobuf-compiler-debuginfoUpgrade protobuf-lite-devel | Mar 12, 2024 | Jan 26, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.1.2Upgrade Splunk Enterprise to version 9.0.7 | Sep 30, 2025 | Jan 26, 2022 |
| Suse | — | Upgrade libprotobuf-lite15-32bitUpgrade libprotobuf15-32bitUpgrade python3-protobufUpgrade libprotobuf-lite20-32bitUpgrade python2-protobufUpgrade libprotobuf-lite20Upgrade libprotoc15Upgrade libprotobuf20-32bitUpgrade protobuf-sourceUpgrade protobuf-javaUpgrade libprotobuf20Upgrade libprotobuf-lite15Upgrade protobuf-develUpgrade libprotoc20Upgrade libprotobuf15Upgrade libprotoc20-32bitUpgrade libprotoc15-32bit | Mar 19, 2022 | Jan 26, 2022 |
| Ubuntu | — | Upgrade libprotoc-devUpgrade libprotoc8 (Ubuntu Pro)Upgrade libprotobuf-lite8 (Ubuntu Pro)Upgrade libprotoc9v5 (Ubuntu Pro)Upgrade libprotobuf-lite23Upgrade libprotobuf23Upgrade libprotobuf10Upgrade libprotoc17Upgrade python-protobufUpgrade libprotobuf-lite10Upgrade libprotobuf-lite9v5 (Ubuntu Pro)Upgrade protobuf-compiler (Ubuntu Pro)Upgrade libprotoc23Upgrade python3-protobufUpgrade libprotobuf9v5 (Ubuntu Pro)Upgrade libprotobuf-lite17Upgrade libprotobuf-javaUpgrade libprotobuf8 (Ubuntu Pro)Upgrade protobuf-compilerUpgrade libprotoc10 | Mar 22, 2023 | Jan 26, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 26, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub