Attributed metadata history

Up to 100 retained publisher events per page for CVE-2022-33070. Withdrawals and unavailable references remain attributed to their publishers.

nvd

observed · 2026-10-12 07:39:03 UTC

Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parse_tag_and_wiretype in protobuf-c/protobuf-c.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

Fingerprint: 8c7c9e31d448344e7a3814c11ccbc1b5f68f7e0cd136737d006bf19245f4173b

nvd

available · 2026-10-12 04:02:58 UTC

available

Fingerprint: 1a480b1c570dfec82c1cc39b732387360c17935637e0981c7b0fd9c8798dc341