Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error message. Since the symbol is incorrectly parsed, the file is nullptr. We recommend upgrading to version 3.15.0 or greater.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-protobufalma-upgrade-protobuf-compileralma-upgrade-protobuf-develalma-upgrade-protobuf-litealma-upgrade-protobuf-lite-develalma-upgrade-python3-protobuf | Nov 14, 2022 | Jan 26, 2022 | |
| Alpine Linux | alpine-linux-upgrade-protobuf | Mar 21, 2024 | Jan 26, 2022 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-protobufamazon-linux-ami-2-upgrade-protobuf-compileramazon-linux-ami-2-upgrade-protobuf-debuginfoamazon-linux-ami-2-upgrade-protobuf-develamazon-linux-ami-2-upgrade-protobuf-emacsamazon-linux-ami-2-upgrade-protobuf-emacs-elamazon-linux-ami-2-upgrade-protobuf-javaamazon-linux-ami-2-upgrade-protobuf-javadocamazon-linux-ami-2-upgrade-protobuf-liteamazon-linux-ami-2-upgrade-protobuf-lite-develamazon-linux-ami-2-upgrade-protobuf-lite-staticamazon-linux-ami-2-upgrade-protobuf-pythonamazon-linux-ami-2-upgrade-protobuf-staticamazon-linux-ami-2-upgrade-protobuf-vim | Feb 7, 2023 | Jan 26, 2022 | |
| Amazon_linux | — | amazon-linux-upgrade-protobuf | Feb 7, 2023 | Jan 26, 2022 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-protobufamazon-linux-2023-upgrade-protobuf-compileramazon-linux-2023-upgrade-protobuf-compiler-debuginfoamazon-linux-2023-upgrade-protobuf-debuginfoamazon-linux-2023-upgrade-protobuf-debugsourceamazon-linux-2023-upgrade-protobuf-develamazon-linux-2023-upgrade-protobuf-emacsamazon-linux-2023-upgrade-protobuf-liteamazon-linux-2023-upgrade-protobuf-lite-debuginfoamazon-linux-2023-upgrade-protobuf-lite-develamazon-linux-2023-upgrade-protobuf-lite-staticamazon-linux-2023-upgrade-protobuf-staticamazon-linux-2023-upgrade-protobuf-vimamazon-linux-2023-upgrade-python3-protobuf | Feb 17, 2025 | Jan 26, 2022 | |
| Centos_linux | — | centos-upgrade-protobufcentos-upgrade-protobuf-compilercentos-upgrade-protobuf-compiler-debuginfocentos-upgrade-protobuf-debuginfocentos-upgrade-protobuf-debugsourcecentos-upgrade-protobuf-litecentos-upgrade-protobuf-lite-debuginfocentos-upgrade-python3-protobuf | Nov 9, 2022 | Jan 26, 2022 |
| Debian | debian-upgrade-protobuf | Apr 19, 2023 | Jan 26, 2022 | |
| Dell Powerstore Dsa2023173 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Jun 21, 2023 | |
| Dell Powerstore Dsa2024158 | dell-powerstoreos-upgrade-latest | Jan 13, 2026 | Apr 4, 2024 | |
| Dell Powerstore Dsa2024225 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | May 29, 2024 | |
| Dell Powerstore Dsa2024287 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Jul 2, 2024 | |
| Freebsd | freebsd-upgrade-package-mysql57-serverfreebsd-upgrade-package-mysql80-clientfreebsd-upgrade-package-mysql80-server | Nov 4, 2022 | Apr 16, 2022 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-protobufhuawei-euleros-2_0_sp10-upgrade-protobuf-compiler | Jun 7, 2022 | Jan 26, 2022 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-protobuf | Aug 18, 2022 | Jan 26, 2022 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-protobufhuawei-euleros-2_0_sp8-upgrade-protobuf-compiler | Aug 18, 2022 | Jan 26, 2022 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-protobufhuawei-euleros-2_0_sp9-upgrade-protobuf-compiler | Jun 16, 2022 | Jan 26, 2022 | |
| Oracle Mysql | mysql-upgrade-8_0_30 | Apr 21, 2026 | Jan 26, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-protobuforacle-linux-upgrade-protobuf-compileroracle-linux-upgrade-protobuf-develoracle-linux-upgrade-protobuf-liteoracle-linux-upgrade-protobuf-lite-develoracle-linux-upgrade-python3-protobuf | Nov 16, 2022 | Jan 26, 2022 |
| Redhat_linux | redhat-upgrade-protobufredhat-upgrade-protobuf-compilerredhat-upgrade-protobuf-compiler-debuginforedhat-upgrade-protobuf-debuginforedhat-upgrade-protobuf-debugsourceredhat-upgrade-protobuf-develredhat-upgrade-protobuf-literedhat-upgrade-protobuf-lite-debuginforedhat-upgrade-protobuf-lite-develredhat-upgrade-python3-protobuf | Nov 9, 2022 | Jan 26, 2022 | |
| Rocky_linux | rocky-upgrade-protobufrocky-upgrade-protobuf-compilerrocky-upgrade-protobuf-compiler-debuginforocky-upgrade-protobuf-debuginforocky-upgrade-protobuf-debugsourcerocky-upgrade-protobuf-develrocky-upgrade-protobuf-literocky-upgrade-protobuf-lite-debuginforocky-upgrade-protobuf-lite-devel | Mar 12, 2024 | Jan 26, 2022 | |
| Splunk | splunk-upgrade-latest | Sep 30, 2025 | Jan 26, 2022 | |
| Suse | — | suse-upgrade-libprotobuf-lite15suse-upgrade-libprotobuf-lite15-32bitsuse-upgrade-libprotobuf-lite20suse-upgrade-libprotobuf-lite20-32bitsuse-upgrade-libprotobuf15suse-upgrade-libprotobuf15-32bitsuse-upgrade-libprotobuf20suse-upgrade-libprotobuf20-32bitsuse-upgrade-libprotoc15suse-upgrade-libprotoc15-32bitsuse-upgrade-libprotoc20suse-upgrade-libprotoc20-32bitsuse-upgrade-protobuf-develsuse-upgrade-protobuf-javasuse-upgrade-protobuf-sourcesuse-upgrade-python2-protobufsuse-upgrade-python3-protobuf | Mar 19, 2022 | Jan 26, 2022 |
| Ubuntu | ubuntu-pro-upgrade-libprotobuf-lite8ubuntu-pro-upgrade-libprotobuf-lite9v5ubuntu-pro-upgrade-libprotobuf8ubuntu-pro-upgrade-libprotobuf9v5ubuntu-pro-upgrade-libprotoc8ubuntu-pro-upgrade-libprotoc9v5ubuntu-pro-upgrade-protobuf-compilerubuntu-upgrade-libprotobuf-javaubuntu-upgrade-libprotobuf-lite10ubuntu-upgrade-libprotobuf-lite17ubuntu-upgrade-libprotobuf-lite23ubuntu-upgrade-libprotobuf10ubuntu-upgrade-libprotobuf23ubuntu-upgrade-libprotoc-devubuntu-upgrade-libprotoc10ubuntu-upgrade-libprotoc17ubuntu-upgrade-libprotoc23ubuntu-upgrade-protobuf-compilerubuntu-upgrade-python-protobufubuntu-upgrade-python3-protobuf | Mar 22, 2023 | Jan 26, 2022 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jan 26, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub