CVE-2022-48468

Description

protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member.

Affected Platforms

Weakness Type

CWE-190, CWE-190

References

• https://github.com/protobuf-c/protobuf-c/commit/ec3d900001a13ccdaa8aef996b34c611…
• https://github.com/protobuf-c/protobuf-c/issues/499
• https://github.com/protobuf-c/protobuf-c/pull/513
• https://github.com/protobuf-c/protobuf-c/releases/tag/v1.4.1
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro…