Square Wire

• CVE-2026-61695 High 7.5 Wire Swift runtime: negative LENGTH_DELIMITED length in skipGroup() crashes any protobuf-decoding service 0.7%
• CVE-2026-63126 High 7.5 Wire: Unauthenticated decoder crash via 32-bit length integer overflow in ByteArrayProtoReader32 (incomplete fix of CVE-2026-45799) 0.8%
• CVE-2026-45799 High 7.5 Wire: skipGroup() missing negative-length check allows 10-byte payload to crash any Wire-decoding service 0.7%
• CVE-2024-58103 Medium 5.8 Square Wire before 5.2.0 does not enforce a recursion limit on nested groups in ByteArrayProtoReader32.kt and ProtoReader.kt. 0.4%