Out-of-bounds Read

Overview github.com/shamaton/msgpack/v3/time is a None Affected versions of this package are vulnerable to Out-of-bounds Read. via the Unmarshal, UnmarshalAsMap, UnmarshalAsArray, and Marshal functions, which invoke Decode. An attacker can cause a panic with truncated fixext data that triggers an...

GO-2026-4513 Denial of service in github.com/shamaton/msgpack

The msgpack decoder fails to properly validate the input buffer length when processing truncated fixext data format codes 0xd4-0xd8. This can lead to an out-of-bounds read and a runtime panic, allowing a denial of service attack...

PT-2026-28435

Name of the Vulnerable Software and Affected Versions msgpack affected versions not specified Description The msgpack decoder does not correctly validate the input buffer length when processing truncated fixext data format codes 0xd4-0xd8. This can result in an out-of-bounds read and a runtime...