In RenderStruct of protostream_objectsource.cc, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"fixes": [
"https://android.googlesource.com/platform/external/protobuf/+/b866b6d10ac195e863e30c5bccfe3b4426435ca4"
],
"severity": "Moderate",
"spl": "2021-06-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "191761877795629199464799725875304065417",
"length": 467
},
"id": "PUB-A-179161711-7be37d8c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/external/protobuf/+/b866b6d10ac195e863e30c5bccfe3b4426435ca4",
"target": {
"file": "src/google/protobuf/util/internal/protostream_objectsource.cc",
"function": "ProtoStreamObjectSource::RenderStruct"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"245034373857113780041875752129992714913",
"21975218960219683772307156259608762430",
"109622698368631723887820184334208668851",
"185224104191637818830714443842123372213"
],
"threshold": 0.9
},
"id": "PUB-A-179161711-d3059fc1",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/external/protobuf/+/b866b6d10ac195e863e30c5bccfe3b4426435ca4",
"target": {
"file": "src/google/protobuf/util/internal/protostream_objectsource.cc"
}
}
]
}