All 2 CVE vulnerabilities found in jackson-dataformat-protobuf, with AI-generated Chinese analysis, references, and POCs.
Vendor: FasterXML
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-110747 | jackson-dataformat-protobuf: integer overflow in ProtobufParser._readStringKey() allows OutOfMemoryError from an 8-byte payload CWE-190 | 7.5 | High | 2026-10-28 |
| CVE-2026-104016 | jackson-dataformat-protobuf: signed integer overflow in string-length paths allows unbounded array allocation and OutOfMemoryError CWE-190 | 7.5 | High | 2026-10-27 |
All 2 known CVE vulnerabilities affecting jackson-dataformat-protobuf with full Chinese analysis, references, and POCs where available.