Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-4565

18
FAUCET Score

CVE-2025-4565 describes a Denial of Service vulnerability in the Protobuf Pure-Python backend, affecting projects that parse untrusted Protocol Buffers data. Maliciously crafted data with excessive recursive groups, messages, or SGROUP tags can trigger a Python RecursionError, crashing the application. This medium-severity vulnerability (CVSS 5.3) has a low impact on availability and can be exploited remotely with low attack complexity. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
< 4.25.8CPE matchmatch criteria
cpe:2.3:a:google:protobuf-python:*:*:*:*:*:*:*:*
>= 5.26.0, < 5.29.5CPE matchmatch criteria
cpe:2.3:a:google:protobuf-python:*:*:*:*:*:*:*:*
>= 6.30.0, < 6.31.1CPE matchmatch criteria
cpe:2.3:a:google:protobuf-python:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 4.0

8.2HIGH

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
PRESENT
Privileges Required
NONE
User Interaction
NONE
VS Confidentiality
NONE
VS Integrity
NONE
VS Availability
HIGH
SS Confidentiality
NONE
SS Integrity
NONE
SS Availability
NONE
Exploit Maturity
NOT_DEFINED
CvssVersion
4.0

Exploit Intelligence

EPSS Score
0.24%
Probability of exploitation in next 30 days
EPSS Percentile
15.2%
Percentile rank of EPSS score among Peer Group
As of 2026-07-26
Model: v2026.06.15
This CVE's current EPSS score of 0.0024 is in the 6th percentile among its peer group of 23,701 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (125)

autodeskpatch availablevia llm_extracted
View patch
feathersjspatch availablevia llm_extracted
Fixed in: 4.25.8, 5.29.5, 6.31.1
View patch
freepbxpatch availablevia llm_extracted
View patch
github_advisorypatch availablevia nvd_reference
View patch
honeywellpatch availablevia llm_extracted
View patch
microsoftpatch availablevia msrc
Product: azl3 tensorflow 2.16.1-9 on Azure Linux 3.0
microsoftpatch availablevia msrc
Product: 17664-17084
microsoftpatch availablevia msrc
Product: 19949-17086
microsoftpatch availablevia msrc
Product: cbl2 grpc 1.42.0-11 on CBL Mariner 2.0
microsoftpatch availablevia msrc
Product: cbl2 keras 2.11.0-3 on CBL Mariner 2.0
microsoftpatch availablevia msrc
Product: cm2 protobuf 3.17.3-4 on CBL Mariner 2.0Fixed in: 3.17.3-4
microsoftpatch availablevia msrc
Product: cbl2 protobuf 3.17.3-4 on CBL Mariner 2.0Fixed in: 3.17.3-4
microsoftpatch availablevia msrc
Product: azl3 mysql 8.0.41-1 on Azure Linux 3.0
microsoftpatch availablevia msrc
Product: cbl2 pytorch 2.0.0-9 on CBL Mariner 2.0
microsoftpatch availablevia msrc
Product: 19602-17084Fixed in: 25.3-5
microsoftpatch availablevia msrc
Product: 19556-16823Fixed in: 3.17.3-4
microsoftpatch availablevia msrc
Product: 20332-17086Fixed in: 3.17.3-4
microsoftpatch availablevia msrc
Product: 20026-17086
microsoftpatch availablevia msrc
Product: 19712-17086
microsoftpatch availablevia msrc
Product: 17539-17084
microsoftpatch availablevia msrc
Product: 19668-17086
microsoftpatch availablevia msrc
Product: 19407-17084
microsoftpatch availablevia msrc
Product: 17667-17084
microsoftpatch availablevia msrc
Product: 19889-17086
microsoftpatch availablevia msrc
Product: 19693-17084
microsoftpatch availablevia msrc
Product: azl3 grpc 1.62.3-1 on Azure Linux 3.0
microsoftpatch availablevia msrc
Product: cbl2 python-tensorboard 2.11.0-3 on CBL Mariner 2.0
microsoftpatch availablevia msrc
Product: cbl2 tensorflow 2.11.1-2 on CBL Mariner 2.0
microsoftpatch availablevia msrc
Product: azl3 pytorch 2.2.2-7 on Azure Linux 3.0
microsoftpatch availablevia msrc
Product: azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0
microsoftpatch availablevia msrc
Product: azl3 protobuf 25.3-5 on Azure Linux 3.0Fixed in: 25.3-5
pippatch availablevia ghsa
Product: protobufFixed in: 6.31.1
pippatch availablevia ghsa
Product: protobufFixed in: 5.29.5
pippatch availablevia ghsa
Product: protobufFixed in: 4.25.8
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.19Fixed in: openshift4/ose-dpu-intel-ipu-vsp-rhel9:v4.19.0-202507081507.p0.gb4d5e23.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Ansible Automation Platform 2.6 for RHEL 9Fixed in: python3.11-protobuf-0:4.25.8-1.el9ap
View patch
sophospatch availablevia llm_extracted
Fixed in: 4.25.8, 5.29.5, 6.31.1
View patch
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/bootc-intel-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/bootc-nvidia-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/disk-image-nvidia-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/docling-serve-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/gemma-2-9b-it
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/gemma-2-9b-it-fp8
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/granite-3.1-8b-lab-v1
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/granite-7b-starter
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/granite-8b-code-base
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/granite-8b-code-instruct
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/granite-8b-lab-v1
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/granite-8b-lab-v2-preview
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/granite-8b-starter-v1
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/instructlab-amd-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/instructlab-intel-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/instructlab-nvidia-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/knowledge-adapter-v3
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/mixtral-8x7b-instruct-v0-1
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/modelcar-docling-layout
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/modelcar-docling-tableformer
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/modelcar-gemma-2-9b-it
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/modelcar-gemma-2-9b-it-fp8
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/modelcar-granite-3-1-8b-lab-v1
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/modelcar-granite-3-1-8b-lab-v2
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/modelcar-granite-3-1-8b-lab-v2-1
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/modelcar-granite-3-1-8b-starter-v1
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/modelcar-granite-3-1-8b-starter-v2
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/modelcar-granite-3-1-8b-starter-v2-1
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/modelcar-granite-7b-redhat-lab
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/modelcar-granite-7b-starter
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/modelcar-granite-8b-code-base
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/modelcar-granite-8b-code-instruct
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/modelcar-granite-8b-lab-v2-preview
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/modelcar-granite-8b-starter-v1
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/modelcar-knowledge-adapter-v3
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/modelcar-mixtral-8x7b-instruct-v0-1
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/modelcar-prometheus-8x7b-v2-0
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/modelcar-skills-adapter-v3
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/modelcar-snowflake-arctic-embed-l-v2.0
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/pathservice-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/prometheus-8x7b-v2-0
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/skills-adapter-v3
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/ui-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat OpenShift AI (RHOAI)Fixed in: rhoai/odh-feast-operator-rhel8
redhatvendor investigatingvia redhat_api
Product: Red Hat OpenShift AI (RHOAI)Fixed in: rhoai/odh-feature-server-rhel8
redhatvendor investigatingvia redhat_api
Product: Red Hat OpenShift AI (RHOAI)Fixed in: rhoai/odh-ml-pipelines-runtime-generic-rhel8
redhatvendor investigatingvia redhat_api
Product: Red Hat OpenShift AI (RHOAI)Fixed in: rhoai/odh-modelmesh-runtime-adapter-rhel8
redhatvendor investigatingvia redhat_api
Product: Red Hat OpenShift AI (RHOAI)Fixed in: rhoai/odh-model-registry-rhel8
redhatvendor investigatingvia redhat_api
Product: Red Hat OpenStack Platform 16.2Fixed in: protobuf
redhatvendor investigatingvia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-rhel8
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/modelcar-granite-8b-lab-v1
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/granite-7b-redhat-lab
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/granite-3.1-8b-lab-v2.1
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/granite-3.1-8b-starter-v1
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/granite-3.1-8b-starter-v2.1
redhatvendor investigatingvia redhat_api
Product: OpenShift Service Mesh 3Fixed in: openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9
redhatvendor investigatingvia redhat_api
Product: OpenShift Service Mesh 3Fixed in: openshift-service-mesh/istio-cni-rhel9
redhatvendor investigatingvia redhat_api
Product: OpenShift Service Mesh 3Fixed in: openshift-service-mesh/istio-must-gather-rhel9
redhatvendor investigatingvia redhat_api
Product: OpenShift Service Mesh 3Fixed in: openshift-service-mesh/istio-pilot-rhel9
redhatvendor investigatingvia redhat_api
Product: OpenShift Service Mesh 3Fixed in: openshift-service-mesh/istio-proxyv2-rhel9
redhatvendor investigatingvia redhat_api
Product: OpenShift Service Mesh 3Fixed in: openshift-service-mesh/istio-rhel9-operator
redhatvendor investigatingvia redhat_api
Product: OpenShift Service Mesh 3Fixed in: openshift-service-mesh/istio-sail-operator-bundle
redhatvendor investigatingvia redhat_api
Product: Red Hat AI Inference ServerFixed in: rhaiis/vllm-cuda-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat AI Inference ServerFixed in: rhaiis/vllm-rocm-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: ansible-automation-platform-24/ee-dellemc-openmanage-rhel8
redhatvendor investigatingvia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: ansible-automation-platform-24/ee-supported-rhel8
redhatvendor investigatingvia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: ansible-automation-platform-24/ee-supported-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: ansible-automation-platform-24/lightspeed-rhel8
redhatvendor investigatingvia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: ansible-automation-platform-24/platform-resource-runner-rhel8
redhatvendor investigatingvia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: ansible-automation-platform-25/aap-cloud-metrics-collector-rhel8
redhatvendor investigatingvia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: ansible-automation-platform-25/ansible-dev-tools-rhel8
redhatvendor investigatingvia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: ansible-automation-platform-25/ee-supported-rhel8
redhatvendor investigatingvia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: ansible-automation-platform-25/ee-supported-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: ansible-automation-platform-25/lightspeed-chatbot-rhel8
redhatvendor investigatingvia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: ansible-automation-platform-25/lightspeed-rhel8
redhatvendor investigatingvia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: ansible-automation-platform-25/platform-resource-runner-rhel8
redhatvendor investigatingvia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: automation-controller
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: protobuf
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: protobuf
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: protobuf
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: fence-agents
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: protobuf
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/bootc-amd-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/bootc-aws-nvidia-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/bootc-azure-amd-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/bootc-azure-nvidia-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/bootc-gcp-nvidia-rhel9
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: rhcos

Vendor Advisories (8)

honeywellllm-honeywell-c82b5cfda9df97a3CRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
freepbxllm-freepbx-e54908c7967265f6CRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
autodeskllm-autodesk-c365b674a2ff5a3aCRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
sophosllm-sophos-8cf838f9f5b2dc37HIGH

Denial of Service vulnerability in protobuf-python

Aug 12, 2025
pipGHSA-8qvm-5x2c-j2w7high

protobuf-python has a potential Denial of Service issue

Jun 16, 2025
redhatCVE-2025-4565Moderate

python-protobuf: Unbounded recursion in Python Protobuf

Jun 16, 2025
microsoft2025-Jun/CVE-2025-4565Important

Unbounded recursion in Python Protobuf

Jun 10, 2025
feathersjsllm-feathersjs-79678be25a9777acHIGH

Denial of Service vulnerability in protobuf-python (CVE-2025-4565)

References

github.com / protocolbuffers/protobuf/commit/17838beda2943d08b8a9d4df5b68f5f04f26d901
Patch