CVE-2026-61695Published
Wire Swift runtime: negative LENGTH_DELIMITED length in skipGroup() crashes any protobuf-decoding service
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-61695 · Microsoft / collected KEV context
cve-program · CVE-2026-61695
- https://github.com/square/wire/security/advisories/GHSA-86wm-r4c5-2rc9
- https://github.com/square/wire/pull/3616
- https://github.com/square/wire/commit/24043b6b3a5e5974a978f2745b76d50b31407c1c
- https://github.com/square/wire/commit/81ff7f24a6795d9a8be2e03f272b2d979a5d2c7e
- https://github.com/square/wire/releases/tag/6.4.1
- https://github.com/square/wire/releases/tag/7.0.0-alpha04
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.