https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T03:45:42.844732+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-375057 EUVD-2026-375057 2026-10-04T03:45:42.927085+00:00 EUVD-2026-375057 https://cve.radiocsirt.org/vuln/fkie_cve-2026-90473 fkie_cve-2026-90473 2026-10-04T03:45:42.927149+00:00

msgpack-java through 0.9.12 contains an integer overflow vulnerability in MessageUnpacker.skipValue() when processing MAP32 containers with large element counts. Attackers can supply a MAP32 element count at or above 0x40000000 that wraps when doubled, causing the parser cursor to desynchronize and attacker-controlled data to be returned in place of later fields.

 https://cve.radiocsirt.org/vuln/ghsa-9vjp-f3jg-99pq GHSA-9vjp-f3jg-99pq 2026-10-04T03:45:42.927204+00:00

msgpack-java through 0.9.12 contains an integer overflow vulnerability in MessageUnpacker.skipValue() when processing MAP32 containers with large element counts. Attackers can supply a MAP32 element count at or above 0x40000000 that wraps when doubled, causing the parser cursor to desynchronize and attacker-controlled data to be returned in place of later fields.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-90473 UBUNTU-CVE-2026-90473 2026-10-04T03:45:42.927256+00:00

Affected: Ubuntu:20.04:LTS: msgpack-java, Ubuntu:22.04:LTS: msgpack-java, Ubuntu:24.04:LTS: msgpack-java, Ubuntu:26.04:LTS: msgpack-java

msgpack-java through 0.9.12 contains an integer overflow vulnerability in MessageUnpacker.skipValue() when processing MAP32 containers with large element counts. Attackers can supply a MAP32 element count at or above 0x40000000 that wraps when doubled, causing the parser cursor to desynchronize and attacker-controlled data to be returned in place of later fields.