CVE-2016-9036

CVE-2016-9036 affects Tarantool’s Msgpuck library 1.0.3. The vulnerability lies in the mp_check function, where decoding a map16 packet can incorrectly report success, allowing an out-of-bounds read and resulting in a denial of service. Public documents confirm the issue but do not provide patch ...