Unknown · Gogo Protobuf · CVE-2021-3121
**Name of the Vulnerable Software and Affected Versions**
GoGo Protobuf versions prior to 1.3.2
**Description**
The issue is related to improper index validation in the `unmarshal.go` file of the GoGo Protobuf library, which can lead to an out-of-bounds panic when parsing maliciously crafted input. This may be used as a denial of service vector if messages are parsed from untrusted parties. The issue affects the confidentiality, integrity, and availability of protected information.
**Recommendations**
For versions prior to 1.3.2, update to version 1.3.2 or later to resolve the issue. As a temporary workaround, consider restricting the use of the `Unmarshal` methods when parsing messages from untrusted parties to minimize the risk of exploitation.