Threats Tagged 'ghsa-9vjp-f3jg-99pq'

msgpack-java versions up to 0.9.12 contain an integer overflow vulnerability in the MessageUnpacker.skipValue() method. This occurs when processing MAP32 containers with very large element counts, specifically at or above 0x40000000. The overflow causes the parser cursor to desynchronize, potentially resulting in attacker-controlled data being returned instead of expected fields. The vulnerability has a medium severity with a CVSS score of 6.9.