CVE-2024-21646

Azure uAMQP (C library for AMQP 1.0) is affected by CVE-2024-21646 due to an integer overflow/memory-safety issue when processing crafted binary data, potentially enabling remote code execution. Affected components appear in multiple contexts: the core Azure uAMQP library used by clients, the azu...

CVE-2024-27099

CVE-2024-27099 affects the Azure uAMQP C library (AMQP 1.0) and is caused by a double-free when processing an incorrect AMQP_VALUE failed state, which may lead to remote code execution. The vulnerability is addressed by updating the submodule to commit 2ca42b6e4e098af2d17e487814a91d05f6ae4987. Se...

CVE-2024-25110

The CVE-2024-25110 entry concerns the UAMQP C library (Azure-uamqp-c submodule). The flaw occurs in open_get_offered_capabilities where a memory allocation may fail, causing a use-after-free that can lead to remote code execution if triggered during connection. A fix is to update the submodule to...