CVE-2026-69219

The vulnerability is in ValueReader.readBytes in ValueReader.java of the RabbitMQ Java client prior to 5.33.1: it allocates a byte array based on a wire-declared length before verifying available frame data, allowing a malicious AMQP peer to trigger a ~2 GB allocation and OutOfMemoryError during ...

CVE-2026-63335 RabbitMQ Java client malformed body frame triggers raw command assembler exception

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.31.0, inbound AMQP command assembly in src/main/java/com/rabbitmq/client/impl/CommandAssembler.java processes a content-bearing method and header whose...

CVE-2026-63335 RabbitMQ Java client malformed body frame triggers raw command assembler exception

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.31.0, inbound AMQP command assembly in src/main/java/com/rabbitmq/client/impl/CommandAssembler.java processes a content-bearing method and header whose...

EUVD-2026-61040

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.31.0, inbound AMQP command assembly in src/main/java/com/rabbitmq/client/impl/CommandAssembler.java processes a content-bearing method and header whose...

CVE-2026-63335 RabbitMQ Java client malformed body frame triggers raw command assembler exception

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.31.0, inbound AMQP command assembly in src/main/java/com/rabbitmq/client/impl/CommandAssembler.java processes a content-bearing method and header whose...

CVE-2026-63335

In CommandAssembler.consumeBodyFrame, the peer-controlled body payload length is subtracted from remainingBodyBytes before bounds validation, driving the value negative and throwing an uncaught UnsupportedOperationException instead of MalformedFrameException, closing the client connection. A mali...

CVE-2026-63335

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.31.0, inbound AMQP command assembly in src/main/java/com/rabbitmq/client/impl/CommandAssembler.java processes a content-bearing method and header whose...

CVE-2026-63335

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.31.0, inbound AMQP command assembly in src/main/java/com/rabbitmq/client/impl/CommandAssembler.java processes a content-bearing method and header whose...

PT-2026-77211

Name of the Vulnerable Software and Affected Versions RabbitMQ Java client library versions prior to 5.33.0 Description The RabbitMQ Java client library contains an issue where com.rabbitmq.tools.jsonrpc.ProcedureDescription processes a javaReturnType value from an untrusted system.describe...

PT-2026-77209

Name of the Vulnerable Software and Affected Versions RabbitMQ Java client library versions prior to 5.31.0 Description Inbound AMQP command assembly in src/main/java/com/rabbitmq/client/impl/CommandAssembler.java processes a content-bearing method and header where the remainingBodyBytes value is...

PT-2026-77208

Name of the Vulnerable Software and Affected Versions RabbitMQ Java client library versions prior to 5.33.0 Description The AMQP connection tuning path records the negotiated AMQP frame max value, but SocketFrameHandler.java and NettyFrameHandlerFactory validate broker-controlled frame payload...

CVE-2026-69220: Uncontrolled Recursion

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/ValueReader.java permits ValueReader.readTable and ValueReader.readArray to call ValueReader.readFieldValue recursively f...

CVE-2026-63335: Improper Input Validation

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.31.0, inbound AMQP command assembly in src/main/java/com/rabbitmq/client/impl/CommandAssembler.java processes a content-bearing method and header whose...

CVE-2026-63337: Use of Externally-Controlled Input to Select Classes or Code

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, com.rabbitmq.tools.jsonrpc.ProcedureDescription receives a javaReturnType value in an untrusted system.describe response and passes it through JSONUtil.tryFill,...

CVE-2026-61634: Improper Input Validation

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, the AMQP connection tuning path records the negotiated AMQP framemax value, but src/main/java/com/rabbitmq/client/impl/SocketFrameHandler.java and...

CVE-2026-63336: Improper Certificate Validation

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, com.rabbitmq.client.ConnectionFactory.useSslProtocol and ConnectionFactory.useSslProtocolString configure com.rabbitmq.client.TrustEverythingTrustManager and...

PT-2026-77210

Name of the Vulnerable Software and Affected Versions RabbitMQ Java client library versions prior to 5.33.0 Description The library allows Java and JVM-based applications to interact with RabbitMQ nodes. The functions useSslProtocol and useSslProtocolString within...

PT-2026-77213

Name of the Vulnerable Software and Affected Versions RabbitMQ Java client library versions prior to 5.33.1 Description An issue exists where the ValueReader.readBytes function in src/main/java/com/rabbitmq/client/impl/ValueReader.java allocates a byte array based on a wire-declared contentLength...

PT-2026-77214

Name of the Vulnerable Software and Affected Versions RabbitMQ Java client library versions prior to 5.33.1 Description In the ValueReader.java file, the readTable and readArray functions call readFieldValue recursively for AMQP table type F and AMQP array type A values without a nesting-depth...

CVE-2026-69219: Memory Allocation with Excessive Size Value

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/ValueReader.java uses ValueReader.readBytes to accept a wire-declared contentLength below Integer.MAXVALUE and allocate a...