CVE-2024-58103CWE-674

Square Wire before 5.2.0 does not enforce a recursion limit on nested groups in ByteArrayProtoReader32.kt and ProtoReader.kt

Medium · published March 16, 2025

CVSS v3.1
5.8
EPSS
0%
Percentile
38.1
In the wild
Unconfirmed
What it is

Square Wire before 5.2.0 does not enforce a recursion limit on nested groups in ByteArrayProtoReader32.kt and ProtoReader.kt.

The record
Technical detail
CVSS v3.1
5.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00450 · 38.1th percentile
Weakness
CWE-674 · Uncontrolled Recursion
Published
2025-03-16T00:00Z
EPSS history
Timeline
  • 16 MAR 00:00Z
    Square Wire before 5.2.0 does not enforce a recursion limit on nested groups in ByteArrayProtoReader32.kt and ProtoReader.kt
    cvelistv5