Cbor2
1 CVEs
product
Monthly
Multiple vulnerabilities exist in cbor2 through version 5.7.0 in the decode_definite_long_string() function of the C extension decoder (source/decoder.c): (1) Integer Underflow Leading to. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Denial Of Service
Integer Overflow
Buffer Overflow
Python
Cbor2
+2
NVD
GitHub
CVSS 3.1
7.5
EPSS
0.3%
CVE-2025-64076
EPSS 0%
CVSS 7.5
HIGH
POC
PATCH
This Month
Multiple vulnerabilities exist in cbor2 through version 5.7.0 in the decode_definite_long_string() function of the C extension decoder (source/decoder.c): (1) Integer Underflow Leading to. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Denial Of Service
Integer Overflow
Buffer Overflow
+4
NVD
GitHub