CVE-2025-53605

The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::coded_input_stream::CodedInputStream::skip_group parsing of unknown fields in untrusted input.
Configurations

No configuration.

History

08 Jul 2025, 16:18

Type Values Removed Values Added
Summary
  • (es) protobuf crate anterior a 3.7.2 para Rust permite una recursión no controlada en el análisis protobuf::coded_input_stream::CodedInputStream::skip_group de campos desconocidos en entradas no confiables.

05 Jul 2025, 01:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-07-05 01:15

Updated : 2025-07-08 16:18


NVD link : CVE-2025-53605

Mitre link : CVE-2025-53605

CVE.ORG link : CVE-2025-53605


JSON object : View

Products Affected

No product.

CWE
CWE-674

Uncontrolled Recursion