Cbor2

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-64076 PyPI HIGH POC PATCH This Month

Multiple vulnerabilities exist in cbor2 through version 5.7.0 in the decode_definite_long_string() function of the C extension decoder (source/decoder.c): (1) Integer Underflow Leading to. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Denial Of Service Integer Overflow Buffer Overflow Python Cbor2 +2

NVD GitHub

CVSS 3.1

7.5

EPSS

0.3%

CVE-2024-26134 PyPI HIGH POC PATCH This Week

cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) (RFC 8949) serialization format. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Buffer Overflow Cbor2 Fedora

NVD GitHub

CVSS 3.1

7.5

EPSS

1.2%

CVE-2025-64076 PyPI

EPSS 0% CVSS 7.5

HIGH POC PATCH This Month

Denial Of Service Integer Overflow Buffer Overflow +4

NVD GitHub

CVE-2024-26134 PyPI

EPSS 1% CVSS 7.5

HIGH POC PATCH This Week

Buffer Overflow Cbor2 Fedora

NVD GitHub