Description (CNA)
Parsing invalid messages can panic. Parsing a text-format message which contains a potential number consisting of a minus sign, one or more characters of whitespace, and no further input will cause a panic.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| google.golang.org/protobuf / google.golang.org/protobuf/encoding/prototext | affected 1.29.0 before 1.29.1 |
| google.golang.org/protobuf / google.golang.org/protobuf/internal/encoding/text | affected 1.29.0 before 1.29.1 |
CWE
No CWE identifiers supplied.
References
- https://go.dev/cl/475995
- https://github.com/golang/protobuf/issues/1530
- https://pkg.go.dev/vuln/GO-2023-1631
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.