CVE-2022-3509 | protobuf-java core/protobuf-java lite up to 3.16.2/3.19.5/3.20.2/3.21.6 Textformat Parser denial of service (WID-SEC-2026-2460)

A vulnerability marked as problematic has been reported in protobuf-java core and protobuf-java lite up to 3.16.2/3.19.5/3.20.2/3.21.6. This issue affects some unknown processing of the component Textformat Parser. Performing a manipulation results in denial of service. This vulnerability was named CVE-2022-3509. The attack may be initiated remotely. There is no available exploit. It is suggested to upgrade the affected component.