241 matches found
MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure
Impact The msgpack-python C extension msgpack.cmsgpack leaks a decoded map value when deserialization rejects a key with strictmapkey=True the default. Repeated malformed inputs can cause unbounded process memory growth and denial of service in applications that deserialize attacker-controlled...
7.5CVSS5.7AI score0.0044EPSS
SaveExploits0References5Affected Software1
20