Vulnerability Description
An integer overflow in the MessagePack\BufferUnpacker component of rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a denial of service via crafted MessagePack input when the application runs on 32-bit PHP
References
- https://github.com/diptendukar/security-advisories/blob/main/CVE-2026-106971.md
- https://github.com/rybakit/msgpack.php
- https://github.com/rybakit/msgpack.php/releases/tag/v0.11.0
FAQ
What is CVE-2026-106971?
CVE-2026-106971 is a documented vulnerability. An integer overflow in the MessagePack\BufferUnpacker component of rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a denial of service via crafted MessagePack input when the applica...
How severe is CVE-2026-106971?
CVSS scoring is not yet available for CVE-2026-106971. Check NVD for updates.
Is there a patch for CVE-2026-106971?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.