CVE-2026-74755 | Apache bRPC up to 1.17.x mcpack2pb src/mcpack2pb/parser.cpp UnparsedValue::as_string value_size integer underflow (ID 3450)

October 21, 2026 Yanac

A vulnerability was found in Apache bRPC up to 1.17.x. It has been rated as problematic. Affected is the function UnparsedValue::as_string of the file src/mcpack2pb/parser.cpp of the component mcpack2pb. This manipulation of the argument value_size causes integer underflow.

This vulnerability appears as CVE-2026-74755. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More