CVEvulnerability

CVE-2021-22570

5.5 MEDIUM Published 2022-01-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-01-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-476

Description

Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error message. Since the symbol is incorrectly parsed, the file is nullptr. We recommend upgrading to version 3.15.0 or greater.

Affected configurations

• google protobuf (< 3.15.0) • debian debian linux 9.0 • debian debian linux 10.0 • debian debian linux 11.0 • fedoraproject fedora 34 • fedoraproject fedora 35 • fedoraproject fedora 36 • oracle mysql (<= 8.0.28) • netapp active iq unified manager • netapp oncommand insight • netapp oncommand workflow automation • netapp snapcenter

Related

Weakness · CWE (1)

  • CWE-476 NULL Pointer Dereference weakness

References