CVE-2026-67414

RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.24, 4.1.15, 4.2.10, and 4.3.4, deps/amqp10common/src/amqp10binaryparser.erl materializes each element of AMQP 1.0 arrays whose shared constructor has zero width, while limiting only the number of elements in each array and not the...

PT-2026-114246

Name of the Vulnerable Software and Affected Versions RabbitMQ versions 4.0.0 through 4.0.23 RabbitMQ versions 4.1.0 through 4.1.14 RabbitMQ versions 4.2.0 through 4.2.9 RabbitMQ versions 4.3.0 through 4.3.3 Description An issue exists where the amqp10 binary parser.erl file materializes each...

PT-2026-114247

Name of the Vulnerable Software and Affected Versions RabbitMQ versions 4.0.0 through 4.0.23 RabbitMQ versions 4.1.0 through 4.1.14 RabbitMQ versions 4.2.0 through 4.2.9 RabbitMQ versions 4.3.0 through 4.3.3 Description The optimized AMQP 1.0 server mode parser in deps/amqp10 common/src/amqp10...

PT-2026-105164

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, and 4.2.6, parse array primitive/2 for constructor 0x45 list0 returns an element with byte-width B = 0. The enclosing array32 parser at line 148 reads a 4-byte Count from the wire and loops Count times...