CVE-2026-59986

The rabbitmq-c C-language AMQP client library is vulnerable to an integer overflow in the amqp_decode_bytes function on 32-bit systems (such as ARM, MIPS, x86 ILP32, and embedded IoT clients). The issue occurs because the bounds check (*offset = o + len)

CVE-2026-59986 rabbitmq-c: amqp_decode_bytes size_t integer overflow bypasses bounds check on 32-bit (OOB read)

rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to version 0.17.0, the bounds check offset = o + len SIZEMAX on 32-bit systems. len is a uint32t read from the AMQP wire as a BYTES/UTF8 field length. The overflow wraps the check to a small value that passes, producing a decoded...

FreeBSD : rabbitmq-c -- multiple vulnerabilities (03306014-c15d-11f1-acb8-107c611e671e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 03306014-c15d-11f1-acb8-107c611e671e advisory. The rabbitmq-c project reports: CVE-2026-61547: A heap buffer overflow exists when the...

MGASA-2026-0397 Updated librabbitmq packages fix security vulnerabilities

amqpdecodebytes sizet integer overflow bypasses bounds check on 32-bit OOB read. CVE-2026-59986 Heap Buffer Overflow in amqpsendframe When Serializing Oversized AMQPFRAMEBODY. CVE-2026-61547...

rabbitmq-c -- multiple vulnerabilities

The rabbitmq-c project reports: CVE-2026-61547: A heap buffer overflow exists when the amqpsendframe API is used to serialise an oversized AMQPFRAMEBODY frame, as memcpy writes past the end of the heap allocation without validating that the body fragment fits within the allocated frame buffer...