Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error message. Since the symbol is incorrectly parsed, the file is nullptr. We recommend upgrading to version 3.15.0 or greater.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-protobufUpgrade protobuf-develUpgrade protobufUpgrade protobuf-compilerUpgrade protobuf-liteUpgrade protobuf-lite-devel | Nov 14, 2022 | Jan 26, 2022 |
| Alpine Linux | — | Upgrade protobuf | Mar 21, 2024 | Jan 26, 2022 |
| Amazon Linux Ami 2 | — | Upgrade protobufUpgrade protobuf-javadocUpgrade protobuf-liteUpgrade protobuf-lite-staticUpgrade protobuf-pythonUpgrade protobuf-emacsUpgrade protobuf-lite-develUpgrade protobuf-emacs-elUpgrade protobuf-vimUpgrade protobuf-develUpgrade protobuf-compilerUpgrade protobuf-debuginfoUpgrade protobuf-staticUpgrade protobuf-java | Feb 7, 2023 | Jan 26, 2022 |
| Amazon_linux | — | Upgrade protobuf | Feb 7, 2023 | Jan 26, 2022 |
| Amazon_linux_2023 | — | Upgrade protobufUpgrade protobuf-compiler-debuginfoUpgrade protobuf-emacsUpgrade protobuf-staticUpgrade python3-protobufUpgrade protobuf-liteUpgrade protobuf-debuginfoUpgrade protobuf-vimUpgrade protobuf-lite-develUpgrade protobuf-debugsourceUpgrade protobuf-lite-staticUpgrade protobuf-lite-debuginfoUpgrade protobuf-develUpgrade protobuf-compiler | Feb 17, 2025 | Jan 26, 2022 |
| Centos_linux | — | Upgrade protobuf-compiler-debuginfoUpgrade protobuf-debugsourceUpgrade protobufUpgrade protobuf-liteUpgrade protobuf-debuginfoUpgrade protobuf-compilerUpgrade protobuf-lite-debuginfoUpgrade python3-protobuf | Nov 9, 2022 | Jan 26, 2022 |
| Debian | — | Upgrade protobuf | Apr 19, 2023 | Jan 26, 2022 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Dell Powerstore Dsa2024287 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jul 2, 2024 |
| Freebsd | — | Upgrade mysql80-clientUpgrade mysql80-serverUpgrade mysql57-server | Nov 4, 2022 | Apr 16, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade protobuf-compilerUpgrade protobuf | Jun 7, 2022 | Jan 26, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade protobuf | Aug 18, 2022 | Jan 26, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade protobufUpgrade protobuf-compiler | Aug 18, 2022 | Jan 26, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade protobuf-compilerUpgrade protobuf | Jun 16, 2022 | Jan 26, 2022 |
| Oracle Mysql | — | Upgrade to MySQL version 8.0.30 | Apr 21, 2026 | Jan 26, 2022 |
| Oracle_linux | — | Upgrade protobuf-compilerUpgrade protobuf-lite-develUpgrade protobuf-develUpgrade protobuf-liteUpgrade python3-protobufUpgrade protobuf | Nov 16, 2022 | Jan 26, 2022 |
| Redhat_linux | — | Upgrade protobuf-lite-develUpgrade protobuf-debugsourceUpgrade protobuf-lite-debuginfoUpgrade protobuf-compilerUpgrade protobuf-debuginfoUpgrade protobuf-develNo solution existsUpgrade protobuf-compiler-debuginfoUpgrade python3-protobufUpgrade protobufUpgrade protobuf-lite | Nov 9, 2022 | Jan 26, 2022 |
| Rocky_linux | — | Upgrade protobuf-lite-develUpgrade protobuf-compiler-debuginfoUpgrade protobuf-debugsourceUpgrade protobuf-liteUpgrade protobuf-debuginfoUpgrade protobufUpgrade protobuf-lite-debuginfoUpgrade protobuf-develUpgrade protobuf-compiler | Mar 12, 2024 | Jan 26, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.1.2Upgrade Splunk Enterprise to version 9.0.7 | Sep 30, 2025 | Jan 26, 2022 |
| Suse | — | Upgrade libprotobuf-lite20-32bitUpgrade python2-protobufUpgrade python3-protobufUpgrade libprotoc15Upgrade libprotobuf-lite20Upgrade libprotobuf-lite15-32bitUpgrade libprotobuf20-32bitUpgrade libprotobuf15-32bitUpgrade libprotoc20-32bitUpgrade protobuf-develUpgrade protobuf-javaUpgrade protobuf-sourceUpgrade libprotoc15-32bitUpgrade libprotoc20Upgrade libprotobuf20Upgrade libprotobuf15Upgrade libprotobuf-lite15 | Mar 19, 2022 | Jan 26, 2022 |
| Ubuntu | — | Upgrade libprotoc10Upgrade protobuf-compilerUpgrade libprotobuf-javaUpgrade libprotobuf8 (Ubuntu Pro)Upgrade libprotobuf9v5 (Ubuntu Pro)Upgrade libprotobuf-lite17Upgrade libprotoc8 (Ubuntu Pro)Upgrade libprotoc23Upgrade python-protobufUpgrade libprotobuf10Upgrade libprotoc-devUpgrade libprotobuf-lite8 (Ubuntu Pro)Upgrade libprotobuf-lite10Upgrade python3-protobufUpgrade libprotoc17Upgrade libprotoc9v5 (Ubuntu Pro)Upgrade libprotobuf-lite9v5 (Ubuntu Pro)Upgrade libprotobuf23Upgrade protobuf-compiler (Ubuntu Pro)Upgrade libprotobuf-lite23 | Mar 22, 2023 | Jan 26, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 26, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub