CVE-2025-64076 | cbor2 up to 5.7.0 source/decoder.c decode_definite_long_string resource consumption (Issue 264)

November 18, 2025 Yanac

A vulnerability labeled as problematic has been found in cbor2 up to 5.7.0. This affects the function decode_definite_long_string of the file source/decoder.c. Executing manipulation can lead to resource consumption.

This vulnerability appears as CVE-2025-64076. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More