Protobuf-c Project Protobuf-c — known CVE vulnerabilities

Every CVE whose affected-product data names Protobuf-c Project Protobuf-c, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2022-33070 — CVSS 5.5 (medium): Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parse_tag_and_wiretype in protobuf-c/protobuf-c.c…
• CVE-2022-48468 — CVSS 5.5 (medium): protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member.