Skip to main content
VulnerabilityPublished Updated

mmcall · Tarantool: Heap-buffer-overflow

Affects tarantoolSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 12 Sep 2026, 19:01 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzztarantoolpkg:generic/tarantoolOther threatsAffected
  • >=8c7cfb1cd0b3f5ce1d5b181403f68f7aaf657d9a
  • =3.5.0
  • =3.5.1
  • =3.5.1-entrypoint
  • =3.5.2-entrypoint
  • =3.6.0
  • =3.6.0-entrypoint
  • =3.6.1
  • =3.6.1-entrypoint
  • =3.6.2
  • =3.6.2-entrypoint
  • =3.6.3-entrypoint
  • =3.7.0-entrypoint
  • =3.7.0
  • =3.7.1-entrypoint
  • =3.8.0-entrypoint
  • =3.5.2
  • =3.6.3
  • =3.6.4-entrypoint
  • =3.5.3-entrypoint
  • =3.6.4
  • =3.7.1
  • =3.7.2-entrypoint
  • =3.8.0
  • =3.8.1-entrypoint
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Until an official fix is available, users should monitor vendor communications and consider applying any temporary mitigations recommended by the vendor or security community.

Description

A heap-buffer-overflow vulnerability has been identified in the Tarantool software, specifically in the mmcall function. This issue was reported by OSS-Fuzz and involves an 8-byte write overflow. The vulnerability is considered high severity but no CVSS score is provided. The affected versions include those at or after commit 8c7cfb1cd0b3f5ce1d5b181403f68f7aaf657d9a. There is no information on available patches or exploits in the wild.

References

Community reviews

Loading reviews…