CVE-2026-6409 — Denial of Service (DoS) vulnerability exists in the Protobuf PHP library during the parsing of untrusted input
A Denial of Service (DoS) vulnerability exists in the Protobuf PHP library during the parsing of untrusted input. Maliciously structured messages—specifically those containing n…
Published: 2026-04-16 · CVSS: 7.1 · CVSS 4.0
A Denial of Service (DoS) vulnerability exists in the Protobuf PHP library during the parsing of untrusted input. Maliciously structured messages—specifically those containing negative varints or deep recursion—can be used to crash the application, impacting service availability.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7