CVE-2026-57585High· 7.5▾ TwilightA flaw was found in MessagePack for Python, a serializer implementation. This vulnerability, categorized as a Use-After-Free (CWE-416), occurs when the Unpacker component is reused after an error. A remote attacker could exploit this by re…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 3.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
0.3%
0.3% → 0.5%
Last analysed / modified upstream
A flaw was found in MessagePack for Python, a serializer implementation. This vulnerability, categorized as a Use-After-Free (CWE-416), occurs when the Unpacker component is reused after an error. A remote attacker could exploit this by repeatedly providing untrusted input, leading to an out-of-bounds read and a system crash. This can result in a Denial of Service (DoS) attack.
msgpack: MessagePack for Python: Denial of Service via Unpacker reuse after error — rated Important by Red Hat. Released 2026-06-30, updated 2026-10-05.
Affected:
Fixed:
No fix planned:
Not affected:
For more information visit https://access.redhat.com/errata/RHSA-2026:73929 https://access.redhat.com/errata/RHSA-2026:73929 For more information visit https://access.redhat.com/errata/RHSA-2026:73930 https://access.redhat.com/errata/RHSA-2026:73930 For more information visit https://access.redhat.com/errata/RHSA-2026:70965 https://access.redhat.com/errata/RHSA-2026:70965
Workarounds / mitigations:
Unpacker instances are not reused after an error has occurred during unpacking. Instead, a new Unpacker instance should be created for subsequent operations.Affected packages:
msgpack < 1.2.1Patched in:
msgpack 1.2.1Connected by shared product, vendor, weakness, or advisory.
CVE-2026-72107Medium· 5.5kernel: dm era: fix out-of-bounds memory access for non-zero start sector (CVE-2026-72107)
CVE-2026-64551High· 7.0kernel: sctp: validate STALE_COOKIE cause length before reading staleness (CVE-2026-64551)
CVE-2026-64546Medium· 5.5kernel: drm/edid: fix OOB read in drm_parse_tiled_block() (CVE-2026-64546)
CVE-2026-64540Medium· 5.5kernel: usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() (CVE-2026-64540)
CVE-2026-64524Medium· 5.5kernel: drm/hyperv: validate resolution_count and fix WIN8 fallback (CVE-2026-64524)
CVE-2026-64448High· 7.0kernel: smb: client: restrict implied bcc[0] exemption to responses without data area (CVE-2026-64448)