CVE-2026-32284 — Denial of service in github.com/shamaton/msgpack
The msgpack decoder fails to properly validate the input buffer length when processing truncated fixext data (format codes 0xd4-0xd8). This can lead to an out-of-bounds read and…
Published: 2026-03-26 · CVSS: 7.5 · CVSS 3.1
The msgpack decoder fails to properly validate the input buffer length when processing truncated fixext data (format codes 0xd4-0xd8). This can lead to an out-of-bounds read and a runtime panic, allowing a denial of service attack.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7