DEBIAN-CVE-2026-72854

msgpackunpackerexpandbuffer in src/unpack.c, reached through the public msgpackunpackerreservebuffer API, computes its new buffer size using an unchecked sizet addition of the requested size and the amount already used. The doubling loop guards its own multiplication against overflow, but the...

AZL-97458 CVE-2026-72854 affecting package fluent-bit 3.1.10-6

msgpackunpackerexpandbuffer in src/unpack.c, reached through the public msgpackunpackerreservebuffer API, computes its new buffer size using an unchecked sizet addition of the requested size and the amount already used. The doubling loop guards its own multiplication against overflow, but the...

PT-2026-79110

Name of the Vulnerable Software and Affected Versions msgpack-c affected versions not specified Description An integer overflow occurs in the msgpack unpacker expand buffer function within src/unpack.c, which is accessible via the msgpack unpacker reserve buffer API. The function calculates the n...