CVE Catalog
CVE-2026-88350
Low risk· EPSS 4%Exploitation Probability (EPSS)
Low risk0.16%
4th percentile - higher than 4% of all known CVEs
Summary
An integer overflow vulnerability exists in MPack 1.1.1 in mpack_node_cstr_alloc() and mpack_node_utf8_cstr_alloc().
Risk Assessment
This may lead to incorrect memory allocation, resulting in application crashes or potential code execution.
Recommendation
Update the MPack library to a version that fixes this integer overflow.
Other vulnerabilities in MPack
Original NVD description (English source)
An integer overflow vulnerability exists in MPack 1.1.1 in mpack_node_cstr_alloc() and mpack_node_utf8_cstr_alloc().
Vulnerability data from NVD (NIST) · CISA KEV · EPSS