CVE-2026-57585
EUVD-2026-4042330.06.2026, 22:16
MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.1, there is an Out-of-bounds read/crash on Unpacker reuse after a caught error, potentially leading to a DoS attack. If the Unpacker is used repeatedly after an error occurs, the process may crash with a SEGV. This issue has been fixed in version 1.2.1.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| msgpack | messagepack | 𝑥 < 1.2.1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| python-msgpack |
| ||||||||||||||||
| python-pip |
| ||||||||||||||||
| python-srsly |
|
openSUSE / SLES Releases
openSUSE Product | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| python3-msgpack |
| ||||||||
| python311-msgpack |
|
Common Weakness Enumeration