msgpack-CVE-2021-23410-test

Prueba para https://snyk.io/vuln/SNYK-JS-MSGPACK-1296122 Esto parece no ser una vulnerabilidad. root@kitploit: var assert = require'assert'; var msgpack = require'msgpack'; function sleepms return new Promiseresolve = setTimeoutresolve, ms; ; async function init var normal = "a": 1, "b": 2, "c": ...

CVE-2026-90473

msgpack-java through 0.9.12 contains an integer overflow vulnerability in MessageUnpacker.skipValue when processing MAP32 containers with large element counts. Attackers can supply a MAP32 element count at or above 0x40000000 that wraps when doubled, causing the parser cursor to desynchronize and...

EUVD-2026-76849

msgpack-java through 0.9.12 contains an integer overflow vulnerability in MessageUnpacker.skipValue when processing MAP32 containers with large element counts. Attackers can supply a MAP32 element count at or above 0x40000000 that wraps when doubled, causing the parser cursor to desynchronize and...

CVE-2026-90473

msgpack-java through 0.9.12 is affected by an integer overflow in MessageUnpacker.skipValue() when processing MAP32 containers. An attacker can supply a MAP32 element count of 0x40000000 or greater , which wraps when doubled, causing the parser cursor to desynchronize so that attacker-controlled ...

CVE-2026-90472

msgpack-java through 0.9.12 contains a stack overflow vulnerability in MessageUnpacker.unpackValue that recursively deserializes arrays and maps without nesting depth limits. Attackers can craft payloads with deeply nested arrays to exhaust the deserializing thread's stack and trigger...

EUVD-2026-76848

msgpack-java through 0.9.12 contains a stack overflow vulnerability in MessageUnpacker.unpackValue that recursively deserializes arrays and maps without nesting depth limits. Attackers can craft payloads with deeply nested arrays to exhaust the deserializing thread's stack and trigger...

CVE-2026-90472

msgpack-java through version 0.9.12 contains a stack overflow vulnerability in MessageUnpacker.unpackValue(), which recursively deserializes arrays and maps without enforcing nesting depth limits. An unauthenticated, network-based attacker can craft a payload with deeply nested arrays to exhaust ...

openSUSE 16 Security Update : msgpack-c (openSUSE-SU-2026:21768-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21768-1 advisory. This update for msgpack-c fixes the following issue: Update to release 7.0.2: - CVE-2026-72854: Integer Overflow in msgpackunpackerexpandbuffer Causes a...

CVE-2026-72854

A flaw was found in msgpack-c. An integer overflow vulnerability exists in the msgpackunpackerexpandbuffer function. This flaw can lead to an undersized memory buffer being allocated, even though the system reports a successful reservation. If an attacker can influence the length provided to the...

SUSE CVE-2026-72854

msgpackunpackerexpandbuffer in src/unpack.c, reached through the public msgpackunpackerreservebuffer API, computes its new buffer size using an unchecked sizet addition of the requested size and the amount already used. The doubling loop guards its own multiplication against overflow, but the...

Linux Distros Unpatched Vulnerability : CVE-2026-72854

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - msgpackunpackerexpandbuffer in src/unpack.c, reached through the public msgpackunpackerreservebuffer API, computes its new buffer size using an unchecked sizet...

AZL-97512 CVE-2026-72854 affecting package lttng-tools 2.13.11-1

msgpackunpackerexpandbuffer in src/unpack.c, reached through the public msgpackunpackerreservebuffer API, computes its new buffer size using an unchecked sizet addition of the requested size and the amount already used. The doubling loop guards its own multiplication against overflow, but the...

AZL-97515 CVE-2026-72854 affecting package msgpack 3.3.0-1

msgpackunpackerexpandbuffer in src/unpack.c, reached through the public msgpackunpackerreservebuffer API, computes its new buffer size using an unchecked sizet addition of the requested size and the amount already used. The doubling loop guards its own multiplication against overflow, but the...

CVE-2026-72854

msgpackunpackerexpandbuffer in src/unpack.c, reached through the public msgpackunpackerreservebuffer API, computes its new buffer size using an unchecked sizet addition of the requested size and the amount already used. The doubling loop guards its own multiplication against overflow, but the...

AZL-97458 CVE-2026-72854 affecting package fluent-bit 3.1.10-6

msgpackunpackerexpandbuffer in src/unpack.c, reached through the public msgpackunpackerreservebuffer API, computes its new buffer size using an unchecked sizet addition of the requested size and the amount already used. The doubling loop guards its own multiplication against overflow, but the...

DEBIAN-CVE-2026-72854

msgpackunpackerexpandbuffer in src/unpack.c, reached through the public msgpackunpackerreservebuffer API, computes its new buffer size using an unchecked sizet addition of the requested size and the amount already used. The doubling loop guards its own multiplication against overflow, but the...

CVE-2026-72854

msgpackunpackerexpandbuffer in src/unpack.c, reached through the public msgpackunpackerreservebuffer API, computes its new buffer size using an unchecked sizet addition of the requested size and the amount already used. The doubling loop guards its own multiplication against overflow, but the...

UBUNTU-CVE-2026-72854

msgpackunpackerexpandbuffer in src/unpack.c, reached through the public msgpackunpackerreservebuffer API, computes its new buffer size using an unchecked sizet addition of the requested size and the amount already used. The doubling loop guards its own multiplication against overflow, but the...

CVE-2026-72854

msgpackunpackerexpandbuffer in src/unpack.c, reached through the public msgpackunpackerreservebuffer API, computes its new buffer size using an unchecked sizet addition of the requested size and the amount already used. The doubling loop guards its own multiplication against overflow, but the...

CVE-2026-72854 msgpack-c Integer Overflow in msgpack_unpacker_expand_buffer Causes a False-Success Undersized Reservation

msgpackunpackerexpandbuffer in src/unpack.c, reached through the public msgpackunpackerreservebuffer API, computes its new buffer size using an unchecked sizet addition of the requested size and the amount already used. The doubling loop guards its own multiplication against overflow, but the...