rpm package
opensuse/msgpack-c&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/msgpack-c&distro=openSUSE%20Tumbleweed
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-72854 | Med | 5.3 | < 7.0.2-2.1 | 7.0.2-2.1 | Aug 20, 2026 | msgpack_unpacker_expand_buffer in src/unpack.c, reached through the public msgpack_unpacker_reserve_buffer API, computes its new buffer size using an unchecked size_t addition of the requested size and the amount already used. The doubling loop guards its own multiplication again |
- affected < 7.0.2-2.1fixed 7.0.2-2.1
msgpack_unpacker_expand_buffer in src/unpack.c, reached through the public msgpack_unpacker_reserve_buffer API, computes its new buffer size using an unchecked size_t addition of the requested size and the amount already used. The doubling loop guards its own multiplication again