https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:38:33 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-375057 EUVD-2026-375057 https://cve.radiocsirt.org/vuln/euvd-2026-375057 https://cve.radiocsirt.org/vuln/fkie_cve-2026-90473 <p>msgpack-java through 0.9.12 contains an integer overflow vulnerability in MessageUnpacker.skipValue() when processing MAP32 containers with large element counts. Attackers can supply a MAP32 element count at or above 0x40000000 that wraps when doubled, causing the parser cursor to desynchronize and attacker-controlled data to be returned in place of later fields.</p> <p>msgpack-java through 0.9.12 contains an integer overflow vulnerability in MessageUnpacker.skipValue() when processing MAP32 containers with large element counts. Attackers can supply a MAP32 element count at or above 0x40000000 that wraps when doubled, causing the parser cursor to desynchronize and attacker-controlled data to be returned in place of later fields.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-90473 https://cve.radiocsirt.org/vuln/ghsa-9vjp-f3jg-99pq <p>msgpack-java through 0.9.12 contains an integer overflow vulnerability in MessageUnpacker.skipValue() when processing MAP32 containers with large element counts. Attackers can supply a MAP32 element count at or above 0x40000000 that wraps when doubled, causing the parser cursor to desynchronize and attacker-controlled data to be returned in place of later fields.</p> <p>msgpack-java through 0.9.12 contains an integer overflow vulnerability in MessageUnpacker.skipValue() when processing MAP32 containers with large element counts. Attackers can supply a MAP32 element count at or above 0x40000000 that wraps when doubled, causing the parser cursor to desynchronize and attacker-controlled data to be returned in place of later fields.</p> https://cve.radiocsirt.org/vuln/ghsa-9vjp-f3jg-99pq https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-90473 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: msgpack-java, Ubuntu:22.04:LTS: msgpack-java, Ubuntu:24.04:LTS: msgpack-java, Ubuntu:26.04:LTS: msgpack-java</p> <p>msgpack-java through 0.9.12 contains an integer overflow vulnerability in MessageUnpacker.skipValue() when processing MAP32 containers with large element counts. Attackers can supply a MAP32 element count at or above 0x40000000 that wraps when doubled, causing the parser cursor to desynchronize and attacker-controlled data to be returned in place of later fields.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: msgpack-java, Ubuntu:22.04:LTS: msgpack-java, Ubuntu:24.04:LTS: msgpack-java, Ubuntu:26.04:LTS: msgpack-java</p> <p>msgpack-java through 0.9.12 contains an integer overflow vulnerability in MessageUnpacker.skipValue() when processing MAP32 containers with large element counts. Attackers can supply a MAP32 element count at or above 0x40000000 that wraps when doubled, causing the parser cursor to desynchronize and attacker-controlled data to be returned in place of later fields.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-90473