← Back

CVE-2020-5234

nvd nist
Published: Jan 31, 2020Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

MessagePack for C# and Unity before version 1.9.11 and 2.1.90 has a vulnerability where untrusted data can lead to DoS attack due to hash collisions and stack overflow. Review the linked GitHub Security Advisory for more information and remediation steps.

Affected (9)

Messagepack
1 product
Messagepack
Configuration A
9 vulnerable
Vulnerable SoftwareAffected Versions
Messagepack
Messagepack
Before 1.9.3
Messagepack
From 2.0.323 to 2.1.80
Messagepack
Version 2.0.110 alpha
Messagepack
Version 2.0.119 beta
Messagepack
Version 2.0.123 beta
Messagepack
Version 2.0.204 beta
Messagepack
Version 2.0.270 rc
Messagepack
Version 2.0.299 rc
Messagepack
Version 2.0.94 alpha

Related CWEs

CWE-121
Stack-based Buffer Overflow
A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (8)

Source: security-advisories@github.com
PatchThird Party Advisory
Source: security-advisories@github.com
Source: security-advisories@github.com
Source: security-advisories@github.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.