Messagepack
Approved changes feed: RSS · Atom
cpe:2.3:a:msgpack:messagepack:*:*:*:*:*:java:*:*part: a version: * update: *
| Vendor | Msgpack (98df2d88-8a0c-5639-acc3-a3bfd250039f) |
|---|---|
| Product | Messagepack (67d6019c-7ca7-524e-8007-e9d4cb34419a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | java |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-90473 |
vulnerable | 2026-09-16 04:33:05.520902 |
msgpack-java through 0.9.12 Integer Overflow via MAP32
MEDIUM (5.3)
msgpack-java through 0.9.12 contains an integer overflow vulnerability in MessageUnpacker.skipValue() when processing MAP32 containers with large element counts. Attackers can supply a MAP32 element count at or above 0x40000000 that wraps when doubled, causing the parser cursor to desynchronize and attacker-controlled data to be returned in place of later fields.
Published: 2026-09-12T11:06:12.224Z
Updated: 2026-09-24T14:21:44.215Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-90472 |
vulnerable | 2026-09-16 04:33:05.480043 |
msgpack-java through 0.9.12 Stack Overflow via Nested Arrays
MEDIUM (5.3)
msgpack-java through 0.9.12 contains a stack overflow vulnerability in MessageUnpacker.unpackValue() that recursively deserializes arrays and maps without nesting depth limits. Attackers can craft payloads with deeply nested arrays to exhaust the deserializing thread's stack and trigger StackOverflowError, causing per-request deserialization failures.
Published: 2026-09-12T11:06:11.553Z
Updated: 2026-09-24T14:21:43.291Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.