CVE-2022-3510 | protobuf-java core/protobuf-java lite up to 3.16.2/3.19.5/3.20.2/3.21.6 Message-Type Extension denial of service (WID-SEC-2026-2460)

A vulnerability described as problematic has been identified in protobuf-java core and protobuf-java lite up to 3.16.2/3.19.5/3.20.2/3.21.6. Impacted is an unknown function of the component Message-Type Extension Handler. Executing a manipulation can lead to denial of service. The identification of this vulnerability is CVE-2022-3510. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is recommended.