VYPR

msgpack-c

by Msgpack

CVEs (1)

  • CVE-2026-72854MedAug 20, 2026
    risk 0.34cvss 5.3epss

    msgpack_unpacker_expand_buffer in src/unpack.c, reached through the public msgpack_unpacker_reserve_buffer API, computes its new buffer size using an unchecked size_t addition of the requested size and the amount already used. The doubling loop guards its own multiplication…