Skip to content
Threat Feed

Product

Nerdbank.MessagePack (< 1.1.62)

1 brief RSS
high advisory

Nerdbank.MessagePack DateTime Decoding Stack Overflow Vulnerability

A malicious MessagePack payload can trigger a StackOverflowException in Nerdbank.MessagePack due to an uncontrolled stack allocation when decoding DateTime values with oversized timestamp extension lengths, leading to process termination.

Nerdbank.MessagePack denial-of-service stack-overflow messagepack
2r 1t