CVE-2026-105042

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-10-29 Modified: 2026-10-29 First seen: 2026-10-29 Status: pending_score

Description

A message body that is deeply nested and decoded by pn_message_body() could overflow the stack and cause a crash. This issue affects Apache Qpid Proton C: through 0.40.0. Users are recommended to upgrade to version 0.41.1, which fixes the issue.

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

No EPSS data available

Intelligence Sources

mitre ref →
nvd ref →