Debian/cbor2: high 7.5
Multiple vulnerabilities exist in cbor2 through version 5.7.0 in the decode_definite_long_string() function of the C extension decoder (source/decoder.c): (1) Integer Underflow Leading to Out-of-Bound
Action: Upgrade cbor2 to 5.7.1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.7.1-1 | - |
Fixed versions
| 5.7.1-1 |
Sources
- osv: DEBIAN-CVE-2025-64076#Debian:14/cbor2
- https://security-tracker.debian.org/tracker/CVE-2025-64076
published · modified · JSON