CVE-2026-77410: CWE-789: Memory Allocation with Excessive Size Value in rabbitmq amqp091-go
RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Channel.recvContent in channel.go preallocates the message body slice with the uint64 ch.header.Size value supplied by an AMQP content header without capping the allocation to the negotiated Connection.Config.FrameSize value. A malicious or compromised broker can send an extreme declared body size and cause the Go runtime to attempt a correspondingly large allocation before body data is received. The allocation can exhaust memory and terminate the client process. This issue is fixed in version 1.13.0.
AI Analysis
Technical Summary
The RabbitMQ amqp091-go client (AMQP 0.9.1) versions before 1.13.0 contain a memory allocation vulnerability (CWE-789) in the Channel.recvContent function. This function preallocates a slice for the message body using the uint64 size value from the AMQP content header without capping it to the negotiated Connection.Config.FrameSize. An attacker controlling or compromising the broker can send a message with an extremely large declared body size, forcing the client to allocate a large amount of memory, which can exhaust system memory and terminate the client process. This vulnerability is fixed in version 1.13.0.
Potential Impact
Exploitation of this vulnerability can cause the client process to consume excessive memory and crash, resulting in denial of service for applications relying on the amqp091-go client. There is no indication of remote code execution or data corruption. The impact is limited to client availability.
Mitigation Recommendations
Upgrade to amqp091-go version 1.13.0 or later, where this issue is fixed by capping the memory allocation to the negotiated frame size. No other mitigations are indicated. Patch status is confirmed fixed in version 1.13.0.
CVE-2026-77410: CWE-789: Memory Allocation with Excessive Size Value in rabbitmq amqp091-go
Description
RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Channel.recvContent in channel.go preallocates the message body slice with the uint64 ch.header.Size value supplied by an AMQP content header without capping the allocation to the negotiated Connection.Config.FrameSize value. A malicious or compromised broker can send an extreme declared body size and cause the Go runtime to attempt a correspondingly large allocation before body data is received. The allocation can exhaust memory and terminate the client process. This issue is fixed in version 1.13.0.
CVSS v4.0
Score 8.9high
Affected software
rabbitmq
amqp091-go
pkg:golang/github.com/rabbitmq/amqp091-goRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The RabbitMQ amqp091-go client (AMQP 0.9.1) versions before 1.13.0 contain a memory allocation vulnerability (CWE-789) in the Channel.recvContent function. This function preallocates a slice for the message body using the uint64 size value from the AMQP content header without capping it to the negotiated Connection.Config.FrameSize. An attacker controlling or compromising the broker can send a message with an extremely large declared body size, forcing the client to allocate a large amount of memory, which can exhaust system memory and terminate the client process. This vulnerability is fixed in version 1.13.0.
Potential Impact
Exploitation of this vulnerability can cause the client process to consume excessive memory and crash, resulting in denial of service for applications relying on the amqp091-go client. There is no indication of remote code execution or data corruption. The impact is limited to client availability.
Mitigation Recommendations
Upgrade to amqp091-go version 1.13.0 or later, where this issue is fixed by capping the memory allocation to the negotiated frame size. No other mitigations are indicated. Patch status is confirmed fixed in version 1.13.0.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-08-20T19:55:27.024Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6aaaabfd55bf5e2cf5bf8d49
Added to database: 09/16/2026, 14:47:25 UTC
Last enriched: 09/16/2026, 15:01:53 UTC
Last updated: 09/16/2026, 22:11:11 UTC
Views: 8
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.