Detections
Analytics
CVE-2026-59986
critical
Description
The rabbitmq-c project reports: CVE-2026-61547: A heap buffer overflow exists when the amqp_send_frame() API is used to serialise an oversized AMQP_FRAME_BODY frame, as memcpy() writes past the end of the heap allocation without validating that the body fragment fits within the allocated frame buffer. CVE-2026-59986: An integer overflow in the amqp_decode_bytes bounds check on 32-bit systems allows a malicious AMQP broker to craft frames with oversized BYTES fields, resulting in an out-of-bounds read that may expose process memory or crash the application.