OSV-2026-1027

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/tarantool/OSV-2026-1027.yaml
JSON Data
https://api.test.osv.dev/v1/vulns/OSV-2026-1027
Published
2026-07-05T00:17:39.793478Z
Modified
2026-08-01T12:30:06.079502601Z
Summary
Heap-buffer-overflow in mp_load_float
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=530970666

Crash type: Heap-buffer-overflow WRITE 4
Crash state:
mp_load_float
mp_decode_float
luamp_decode_with_ctx
References

Affected packages

OSS-Fuzz / tarantool

Package

Name
tarantool
Purl
pkg:generic/tarantool

Affected ranges

Type
GIT
Repo
https://github.com/tarantool/tarantool
Events
Introduced
c679fad72328070e9d94426077b8cc45c390e313
Fixed
42d7de284ffb896006e74a51fbd0f62318b813ba
Introduced
ea71e2c3be2f5271e0cfd86ff63d36f97d484c7f
Introduced
017842b2df13207ff7a817dcafd89c0d6b10c2ba

Affected versions

3.*
3.6.4
3.7.1
3.7.2-entrypoint
3.8.0
3.8.1-entrypoint
3.9.0-entrypoint

Ecosystem specific 

{
    "severity": "HIGH"
}

Database specific

fixed_range 
"62cb643b0083a1346b685818ab89ceb8a3d24766:42d7de284ffb896006e74a51fbd0f62318b813ba"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/tarantool/OSV-2026-1027.yaml"