Repository navigation
CVE-2024-58103 Vulnerabilities #1268
Description
Published Vulnerabilities:
CVE: CVE-2024-58103
Square Wire before 5.2.0 does not enforce a recursion limit on nested groups in ByteArrayProtoReader32.kt and ProtoReader.kt.
Published Vulnerabilities:
CVE: CVE-2024-58103
Square Wire before 5.2.0 does not enforce a recursion limit on nested groups in ByteArrayProtoReader32.kt and ProtoReader.kt.
Activity
Kehrlann commentedon Apr 28, 2025
Since we read from a well-known API, I do not think the threat profile is high.
This is a medium-score, I'm going to close this and we'll upgrade versions in a later release as part of maintenance.