CVE-2026-54522

Microsoft · Published August 7, 2026

5.4

CVSS v3.1

MEDIUM

Patch availableGet patch

Description

MessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer Disclosure. MessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer Disclosure

Affected Products

azl3 rubygem-msgpack 1.7.2-1 on Azure Linux 3.0

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N