# CVE-2022-1941: protobuf: The protobuf packages provide Protocol Buffers, Google's data interchange format

CVE-2022-1941 is fixed in 28 products on 1 platform, first by elpa-protobuf-mode 3.12.4-1ubuntu7.22.04.1, released September 22, 2022. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2022-1941
- Priority: High
- CVSS: 7.5 (Moderate)
- EPSS: 0.0151
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Sep 22, 2022

## Description

The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide a flexible, efficient, and automated mechanism for serializing structured data.  Security Fix(es):  * protobuf: message parsing vulnerability in ProtocolBuffers (CVE-2022-1941)  For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  Additional Changes:  For detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes linked from the References section.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | elpa-protobuf-mode Ubuntu 22.04.1 LTS (jammy) | 3.12.4-1ubuntu7.22.04.1 | [elpa-protobuf-mode 3.12.4-1ubuntu7.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-elpa-protobuf-mode-3.12.4-1ubuntu7.22.04.1.md) | Sep 22, 2022 |
| Linux | libprotobuf-java Ubuntu 18.04.6 LTS (bionic) | 3.0.0-9.1ubuntu1.1 | [libprotobuf-java 3.0.0-9.1ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libprotobuf-java-3.0.0-9.1ubuntu1.1.md) | Sep 22, 2022 |
| Linux | libprotobuf-java Ubuntu 20.04 LTS (focal) | 3.6.1.3-2ubuntu5.2 | [libprotobuf-java 3.6.1.3-2ubuntu5.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libprotobuf-java-3.6.1.3-2ubuntu5.2.md) | Sep 22, 2022 |
| Linux | libprotobuf-java Ubuntu 22.04.1 LTS (jammy) | 3.12.4-1ubuntu7.22.04.1 | [libprotobuf-java 3.12.4-1ubuntu7.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libprotobuf-java-3.12.4-1ubuntu7.22.04.1.md) | Sep 22, 2022 |
| Linux | libprotobuf-lite10 Ubuntu 18.04.6 LTS (bionic) | 3.0.0-9.1ubuntu1.1 | [libprotobuf-lite10 3.0.0-9.1ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libprotobuf-lite10-3.0.0-9.1ubuntu1.1.md) | Sep 22, 2022 |
| Linux | libprotobuf-lite17 Ubuntu 20.04 LTS (focal) | 3.6.1.3-2ubuntu5.2 | [libprotobuf-lite17 3.6.1.3-2ubuntu5.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libprotobuf-lite17-3.6.1.3-2ubuntu5.2.md) | Sep 22, 2022 |
| Linux | libprotobuf-lite23 Ubuntu 22.04.1 LTS (jammy) | 3.12.4-1ubuntu7.22.04.1 | [libprotobuf-lite23 3.12.4-1ubuntu7.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libprotobuf-lite23-3.12.4-1ubuntu7.22.04.1.md) | Sep 22, 2022 |
| Linux | libprotobuf10 Ubuntu 18.04.6 LTS (bionic) | 3.0.0-9.1ubuntu1.1 | [libprotobuf10 3.0.0-9.1ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libprotobuf10-3.0.0-9.1ubuntu1.1.md) | Sep 22, 2022 |
| Linux | libprotobuf17 Ubuntu 20.04 LTS (focal) | 3.6.1.3-2ubuntu5.2 | [libprotobuf17 3.6.1.3-2ubuntu5.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libprotobuf17-3.6.1.3-2ubuntu5.2.md) | Sep 22, 2022 |
| Linux | libprotobuf23 Ubuntu 22.04.1 LTS (jammy) | 3.12.4-1ubuntu7.22.04.1 | [libprotobuf23 3.12.4-1ubuntu7.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libprotobuf23-3.12.4-1ubuntu7.22.04.1.md) | Sep 22, 2022 |
| Linux | libprotoc10 Ubuntu 18.04.6 LTS (bionic) | 3.0.0-9.1ubuntu1.1 | [libprotoc10 3.0.0-9.1ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libprotoc10-3.0.0-9.1ubuntu1.1.md) | Sep 22, 2022 |
| Linux | libprotoc17 Ubuntu 20.04 LTS (focal) | 3.6.1.3-2ubuntu5.2 | [libprotoc17 3.6.1.3-2ubuntu5.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libprotoc17-3.6.1.3-2ubuntu5.2.md) | Sep 22, 2022 |
| Linux | libprotoc23 Ubuntu 22.04.1 LTS (jammy) | 3.12.4-1ubuntu7.22.04.1 | [libprotoc23 3.12.4-1ubuntu7.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libprotoc23-3.12.4-1ubuntu7.22.04.1.md) | Sep 22, 2022 |
| Linux | protobuf Debian 12.15 (bookworm) | 3.21.9-3 | [DEBIAN-CVE-2022-1941](https://patchblox.com/security/data/fix/linux/debian-cve-2022-1941.md) | Sep 22, 2022 |
| Linux | protobuf Debian 13.5 (trixie) | 3.21.9-3 | [DEBIAN-CVE-2022-1941](https://patchblox.com/security/data/fix/linux/debian-cve-2022-1941.md) | Sep 22, 2022 |
| Linux | protobuf Debian 14 | 3.21.9-3 | [DEBIAN-CVE-2022-1941](https://patchblox.com/security/data/fix/linux/debian-cve-2022-1941.md) | Sep 22, 2022 |
| Linux | protobuf RHEL 9 | 0:3.14.0-16.el9 | [RHSA-2025:7138](https://patchblox.com/security/data/fix/linux/rhsa-2025-7138.md) | May 13, 2025 |
| Linux | protobuf almalinux 9 | 3.14.0-16.el9 | [ALSA-2025:7138](https://patchblox.com/security/data/fix/linux/alsa-2025-7138.md) | May 13, 2025 |
| Linux | protobuf amzn 2023 | 3.19.6-1.amzn2023.0.1 | [ALAS2023-2023-049](https://patchblox.com/security/data/fix/linux/alas2023-2023-049.md) | Feb 17, 2023 |
| Linux | protobuf ol 9 | 0:3.14.0-16.el9 | [ELSA-2025-7138](https://patchblox.com/security/data/fix/linux/elsa-2025-7138.md) | May 16, 2025 |
| Linux | protobuf rocky 9 | 0:3.14.0-16.el9 | [RLSA-2025:7138](https://patchblox.com/security/data/fix/linux/rlsa-2025-7138.md) | Oct 4, 2025 |
| Linux | protobuf-compiler RHEL 9 | 0:3.14.0-16.el9 | [RHSA-2025:7138](https://patchblox.com/security/data/fix/linux/rhsa-2025-7138.md) | May 13, 2025 |
| Linux | protobuf-compiler Ubuntu 18.04.6 LTS (bionic) | 3.0.0-9.1ubuntu1.1 | [protobuf-compiler 3.0.0-9.1ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-protobuf-compiler-3.0.0-9.1ubuntu1.1.md) | Sep 22, 2022 |
| Linux | protobuf-compiler Ubuntu 20.04 LTS (focal) | 3.6.1.3-2ubuntu5.2 | [protobuf-compiler 3.6.1.3-2ubuntu5.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-protobuf-compiler-3.6.1.3-2ubuntu5.2.md) | Sep 22, 2022 |
| Linux | protobuf-compiler Ubuntu 22.04.1 LTS (jammy) | 3.12.4-1ubuntu7.22.04.1 | [protobuf-compiler 3.12.4-1ubuntu7.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-protobuf-compiler-3.12.4-1ubuntu7.22.04.1.md) | Sep 22, 2022 |
| Linux | protobuf-compiler almalinux 9 | 3.14.0-16.el9 | [ALSA-2025:7138](https://patchblox.com/security/data/fix/linux/alsa-2025-7138.md) | May 13, 2025 |
| Linux | protobuf-compiler amzn 2023 | 3.19.6-1.amzn2023.0.1 | [ALAS2023-2023-049](https://patchblox.com/security/data/fix/linux/alas2023-2023-049.md) | Feb 17, 2023 |
| Linux | protobuf-compiler ol 9 | 0:3.14.0-16.el9 | [ELSA-2025-7138](https://patchblox.com/security/data/fix/linux/elsa-2025-7138.md) | May 16, 2025 |
| Linux | protobuf-compiler-debuginfo amzn 2023 | 3.19.6-1.amzn2023.0.1 | [ALAS2023-2023-049](https://patchblox.com/security/data/fix/linux/alas2023-2023-049.md) | Feb 17, 2023 |
| Linux | protobuf-debuginfo amzn 2023 | 3.19.6-1.amzn2023.0.1 | [ALAS2023-2023-049](https://patchblox.com/security/data/fix/linux/alas2023-2023-049.md) | Feb 17, 2023 |
| Linux | protobuf-debugsource amzn 2023 | 3.19.6-1.amzn2023.0.1 | [ALAS2023-2023-049](https://patchblox.com/security/data/fix/linux/alas2023-2023-049.md) | Feb 17, 2023 |
| Linux | protobuf-devel RHEL 9 | 0:3.14.0-16.el9 | [RHSA-2025:7138](https://patchblox.com/security/data/fix/linux/rhsa-2025-7138.md) | May 13, 2025 |
| Linux | protobuf-devel almalinux 9 | 3.14.0-16.el9 | [ALSA-2025:7138](https://patchblox.com/security/data/fix/linux/alsa-2025-7138.md) | May 13, 2025 |
| Linux | protobuf-devel amzn 2023 | 3.19.6-1.amzn2023.0.1 | [ALAS2023-2023-049](https://patchblox.com/security/data/fix/linux/alas2023-2023-049.md) | Feb 17, 2023 |
| Linux | protobuf-devel ol 9 | 0:3.14.0-16.el9 | [ELSA-2025-7138](https://patchblox.com/security/data/fix/linux/elsa-2025-7138.md) | May 16, 2025 |
| Linux | protobuf-emacs amzn 2023 | 3.19.6-1.amzn2023.0.1 | [ALAS2023-2023-049](https://patchblox.com/security/data/fix/linux/alas2023-2023-049.md) | Feb 17, 2023 |
| Linux | protobuf-lite RHEL 9 | 0:3.14.0-16.el9 | [RHSA-2025:7138](https://patchblox.com/security/data/fix/linux/rhsa-2025-7138.md) | May 13, 2025 |
| Linux | protobuf-lite almalinux 9 | 3.14.0-16.el9 | [ALSA-2025:7138](https://patchblox.com/security/data/fix/linux/alsa-2025-7138.md) | May 13, 2025 |
| Linux | protobuf-lite amzn 2023 | 3.19.6-1.amzn2023.0.1 | [ALAS2023-2023-049](https://patchblox.com/security/data/fix/linux/alas2023-2023-049.md) | Feb 17, 2023 |
| Linux | protobuf-lite ol 9 | 0:3.14.0-16.el9 | [ELSA-2025-7138](https://patchblox.com/security/data/fix/linux/elsa-2025-7138.md) | May 16, 2025 |
| Linux | protobuf-lite-debuginfo amzn 2023 | 3.19.6-1.amzn2023.0.1 | [ALAS2023-2023-049](https://patchblox.com/security/data/fix/linux/alas2023-2023-049.md) | Feb 17, 2023 |
| Linux | protobuf-lite-devel RHEL 9 | 0:3.14.0-16.el9 | [RHSA-2025:7138](https://patchblox.com/security/data/fix/linux/rhsa-2025-7138.md) | May 13, 2025 |
| Linux | protobuf-lite-devel almalinux 9 | 3.14.0-16.el9 | [ALSA-2025:7138](https://patchblox.com/security/data/fix/linux/alsa-2025-7138.md) | May 13, 2025 |
| Linux | protobuf-lite-devel amzn 2023 | 3.19.6-1.amzn2023.0.1 | [ALAS2023-2023-049](https://patchblox.com/security/data/fix/linux/alas2023-2023-049.md) | Feb 17, 2023 |
| Linux | protobuf-lite-devel ol 9 | 0:3.14.0-16.el9 | [ELSA-2025-7138](https://patchblox.com/security/data/fix/linux/elsa-2025-7138.md) | May 16, 2025 |
| Linux | protobuf-lite-static amzn 2023 | 3.19.6-1.amzn2023.0.1 | [ALAS2023-2023-049](https://patchblox.com/security/data/fix/linux/alas2023-2023-049.md) | Feb 17, 2023 |
| Linux | protobuf-static amzn 2023 | 3.19.6-1.amzn2023.0.1 | [ALAS2023-2023-049](https://patchblox.com/security/data/fix/linux/alas2023-2023-049.md) | Feb 17, 2023 |
| Linux | protobuf-vim amzn 2023 | 3.19.6-1.amzn2023.0.1 | [ALAS2023-2023-049](https://patchblox.com/security/data/fix/linux/alas2023-2023-049.md) | Feb 17, 2023 |
| Linux | python-protobuf Ubuntu 18.04.6 LTS (bionic) | 3.0.0-9.1ubuntu1.1 | [python-protobuf 3.0.0-9.1ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-protobuf-3.0.0-9.1ubuntu1.1.md) | Sep 22, 2022 |
| Linux | python-protobuf Ubuntu 20.04 LTS (focal) | 3.6.1.3-2ubuntu5.2 | [python-protobuf 3.6.1.3-2ubuntu5.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-python-protobuf-3.6.1.3-2ubuntu5.2.md) | Sep 22, 2022 |
| Linux | python3-protobuf RHEL 9 | 0:3.14.0-16.el9 | [RHSA-2025:7138](https://patchblox.com/security/data/fix/linux/rhsa-2025-7138.md) | May 13, 2025 |
| Linux | python3-protobuf Ubuntu 18.04.6 LTS (bionic) | 3.0.0-9.1ubuntu1.1 | [python3-protobuf 3.0.0-9.1ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3-protobuf-3.0.0-9.1ubuntu1.1.md) | Sep 22, 2022 |
| Linux | python3-protobuf Ubuntu 20.04 LTS (focal) | 3.6.1.3-2ubuntu5.2 | [python3-protobuf 3.6.1.3-2ubuntu5.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-python3-protobuf-3.6.1.3-2ubuntu5.2.md) | Sep 22, 2022 |
| Linux | python3-protobuf Ubuntu 22.04.1 LTS (jammy) | 3.12.4-1ubuntu7.22.04.1 | [python3-protobuf 3.12.4-1ubuntu7.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-python3-protobuf-3.12.4-1ubuntu7.22.04.1.md) | Sep 22, 2022 |
| Linux | python3-protobuf almalinux 9 | 3.14.0-16.el9 | [ALSA-2025:7138](https://patchblox.com/security/data/fix/linux/alsa-2025-7138.md) | May 13, 2025 |
| Linux | python3-protobuf amzn 2023 | 3.19.6-1.amzn2023.0.1 | [ALAS2023-2023-049](https://patchblox.com/security/data/fix/linux/alas2023-2023-049.md) | Feb 17, 2023 |
| Linux | python3-protobuf ol 9 | 0:3.14.0-16.el9 | [ELSA-2025-7138](https://patchblox.com/security/data/fix/linux/elsa-2025-7138.md) | May 16, 2025 |
| Linux | python3-protobuf-debuginfo amzn 2023 | 3.19.6-1.amzn2023.0.1 | [ALAS2023-2023-049](https://patchblox.com/security/data/fix/linux/alas2023-2023-049.md) | Feb 17, 2023 |
| Linux | ruby-google-protobuf Ubuntu 20.04 LTS (focal) | 3.6.1.3-2ubuntu5.2 | [ruby-google-protobuf 3.6.1.3-2ubuntu5.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-ruby-google-protobuf-3.6.1.3-2ubuntu5.2.md) | Sep 22, 2022 |
| Linux | ruby-google-protobuf Ubuntu 22.04.1 LTS (jammy) | 3.12.4-1ubuntu7.22.04.1 | [ruby-google-protobuf 3.12.4-1ubuntu7.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-ruby-google-protobuf-3.12.4-1ubuntu7.22.04.1.md) | Sep 22, 2022 |

---

Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.
