QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2025-4565

Back to search

CVE-2025-4565

Published: Jun 16, 2025

Modified: Jun 16, 2025

PUBLISHED

Description

Any project that uses Protobuf Pure-Python backend to parse untrusted Protocol Buffers data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion limit. This can result in a Denial of service by crashing the application with a RecursionError. We recommend upgrading to version =>6.31.1 or beyond commit 17838beda2943d08b8a9d4df5b68f5f04f26d901

VendorProductVersions

protocolbuffers

Python-Protobuf

affected
0 - < 4.25.8
affected
0 - < 5.29.5
affected
0 - < 6.31.1

protocolbuffers

Python-Protobuf

affected
0 - < 4.25.8
affected
0 - < 5.29.5
affected
0 - < 6.31.1

Weaknesses (CWE)

CWE-674

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now