Skip to content
OpenAdvisories

Product · msgpack

msgpack-c

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.3

    msgpack-c Integer Overflow in msgpack_unpacker_expand_buffer Causes a False-Success Undersized Reservation

    msgpack_unpacker_expand_buffer in src/unpack.c, reached through the public msgpack_unpacker_reserve_buffer API, computes its new buffer size using an unchecked size_t addition of the requested size and the amount already used. The doubling loop guards its own…