CVE-2022-33070

Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parse_tag_and_wiretype in protobuf-c/protobuf-c.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

• https://github.com/protobuf-c/protobuf-c/issues/506Exploit, Issue Tracking, Patch, Third Party Advisory
• https://github.com/protobuf-c/protobuf-c/pull/508Exploit, Issue Tracking, Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FFN2GHUEGTSHRD7J5PKQ5DRSJSEQ2IKN/
• https://github.com/protobuf-c/protobuf-c/issues/506Exploit, Issue Tracking, Patch, Third Party Advisory
• https://github.com/protobuf-c/protobuf-c/pull/508Exploit, Issue Tracking, Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FFN2GHUEGTSHRD7J5PKQ5DRSJSEQ2IKN/

Published

Jun 23, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-33064An off-by-one error in function wav_read_header in src/wav.c…7.8
• CVE-2022-33065Multiple signed integers overflow in function au_read_header…7.8
• CVE-2022-33067Lrzip v0.651 was discovered to contain multiple invalid arit…5.5
• CVE-2022-33068An integer overflow in the component hb-ot-shape-fallback.cc…5.5
• CVE-2022-33069Ethereum Solidity v0.8.14 contains an assertion failure via …5.5
• CVE-2022-3307Use after free in media in Google Chrome prior to 106.0.5249…8.8
• CVE-2022-33075A stored cross-site scripting (XSS) vulnerability in the Add…5.4
• CVE-2022-33077An access control issue in nopcommerce v4.50.2 allows attack…7.5
• CVE-2022-3308Insufficient policy enforcement in developer tools in Google…7.4
• CVE-2022-33082An issue in the AST parser (ast/compile.go) of Open Policy A…7.5
• CVE-2022-33085ESPCMS P8 was discovered to contain an authenticated remote …7.2
• CVE-2022-33087A stack overflow in the function DM_ In fillobjbystr() of TP…7.5