Skip to content
CVE PROGRAM SOURCE RECORD7.6 High

CVE-2024-2410

Use after free in C++ protobuf

Description

The JsonToBinaryStream() function is part of the protocol buffers C++ implementation and is used to parse JSON from a stream. If the input is broken up into separate chunks in a certain way, the parser will attempt to read bytes from a chunk that has already been freed. 

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

protocolbuffers protobuf

Default version status: unaffected

  • 4.22.0 to < 4.25.0affected

References