Threats tagged 'brew-ansible-cve-2026-57585'

MessagePack for Python contains a vulnerability (CVE-2026-57585) where reusing the Unpacker object after an error can cause an out-of-bounds read leading to a segmentation fault (SEGV) crash. This can result in a denial-of-service (DoS) condition if untrusted input triggers repeated errors. The issue is fixed in version 14.0.0_2. Users are advised to create a new Unpacker instance after an error instead of reusing the same one to avoid crashes and incorrect data processing.