CVE-2024-58103

Name of the Vulnerable Software and Affected Versions: Square Wire versions prior to 5.2.0

Description: The issue is related to the lack of recursion limit enforcement on nested groups in ByteArrayProtoReader32.kt and ProtoReader.kt. This could potentially lead to issues when processing certain data.

Recommendations: For versions prior to 5.2.0, update to version 5.2.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of nested groups in ByteArrayProtoReader32.kt and ProtoReader.kt to minimize the risk of exploitation.