CVE-2024-58103

Description

Square Wire before 5.2.0 does not enforce a recursion limit on nested groups in ByteArrayProtoReader32.kt and ProtoReader.kt.

Affected Platforms

Weakness Type

CWE-674

References

• https://github.com/square/wire/commit/b90e60c09befaff836a2fc2ee4d678451b2ec75d
• https://github.com/square/wire/compare/5.1.0...5.2.0