NetSight
unscored

CVE-2026-106971

An integer overflow in the MessagePack\BufferUnpacker component of rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a denial of service via c…

Impact

An integer overflow in the MessagePack\BufferUnpacker component of rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a denial of service via crafted MessagePack input when the application runs on 32-bit PHP

Affected products

ProductAffected versions
Rybakit/Msgpack
before 0.11.0

Versions were read from the advisory text. No structured product data has been published for this record yet.

References