CVE-2022-3510

CVE-2022-3510 is a denial-of-service vulnerability affecting protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6, and 3.16.3. This parsing issue, similar to CVE-2022-3171, occurs when inputs with multiple instances of non-repeated embedded messages containing repeated or unknown fields cause excessive object conversions, leading to long garbage collection pauses. With a CVSS score of 7.5 (High), this vulnerability can be exploited remotely with low attack complexity, resulting in a high impact on availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.