Debian/msgpack-c: medium 5.3
msgpack_unpacker_expand_buffer in src/unpack.c, reached through the public msgpack_unpacker_reserve_buffer API, computes its new buffer size using an unchecked size_t addition of the requested size an
Action: Upgrade msgpack-c to 7.0.2-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.0.2-1 | - |
Fixed versions
| 7.0.2-1 |
Sources
- osv: DEBIAN-CVE-2026-72854#Debian:14/msgpack-c
- https://security-tracker.debian.org/tracker/CVE-2026-72854
published · modified · JSON