CVE-2025-64076: Integer Underflow (Wrap or Wraparound)

Multiple vulnerabilities exist in cbor2 through version 5.7.0 in the decodedefinitelongstring function of the C extension decoder source/decoder.c: 1 Integer Underflow Leading to Out-of-Bounds Read CWE-191, CWE-125: An incorrect variable reference and missing state reset in the chunk processing...

CVE-2025-64076

Multiple vulnerabilities exist in cbor2 through version 5.7.0 in the decodedefinitelongstring function of the C extension decoder source/decoder.c: 1 Integer Underflow Leading to Out-of-Bounds Read CWE-191, CWE-125: An incorrect variable reference and missing state reset in the chunk processing...

cbor2 security vulnerabilities

cbor2 is a library with extensive tag support for encoding and decoding binary object representations in serialized format by the individual developer Alex Grönholm. A security vulnerability exists in cbor2 version 5.7.0 and earlier, which stems from an integer overflow and memory leak in the...