CVE Feed

    Dashboard / CVE / CVE-2023-24535

    CVE-2023-24535

    Parsing invalid messages can panic. Parsing a text-format message which contains a potential number consisting of a minus sign, one or more characters of whitespace, and no further input will cause a panic.

    Published:Jun 8, 2023
    Last Modified:Jan 6, 2025
    EPS:Jun 8, 2023
    EPSS Score:0.00276
    CVSS Score:7.5

    Affected Products

    Vendor
    Protobuf
    Product
    Protobuf

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-59876 (CVSS 4.8) — protobufjs compiles protobuf definitions into JavaScript (JS) functions. From 8.2.0 until 8.6.5, the protobufj…
    CVE-2026-59877 (CVSS 5.3) — protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.6.5 and 8.6.6, protobufjs …
    CVE-2026-54269 (CVSS 5.3) — protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 8.6.0 and 7.6.3, protobufjs …
    CVE-2026-48712 (CVSS 7.5) — protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.6.1 and 8.4.1, protobufjs …
    CVE-2026-54270 (CVSS 5.3) — protobufjs compiles protobuf definitions into JavaScript (JS) functions. From 8.2.0 to 8.4.2, protobufjs prese…
    CVE-2026-44295 (CVSS 8.7) — protobufjs-cli is the command line add-on for protobuf.js. Prior to 1.2.1 and 2.0.2, pbjs static code generati…
    CVE-2026-42290 (CVSS 7.8) — protobufjs-cli is the command line add-on for protobuf.js. Prior to 1.2.1 and 2.0.2, pbts invoked JSDoc by bui…
    CVE-2026-45740 (CVSS 5.3) — protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.8 and 8.2.0, protobufjs …
    CVE-2026-44294 (CVSS 5.3) — protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs …
    CVE-2026-44293 (CVSS 7.7) — protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High