{"id":"GHSA-j586-36cw-2gc2","aliases":["CVE-2026-114613"],"title":"MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure","description":"### Impact\n\nThe msgpack-python C extension (`msgpack._cmsgpack`) leaks a decoded map value when deserialization rejects a key with `strict_map_key=True` (the default). Repeated malformed inputs can cause unbounded process memory growth and denial of service in applications that deserialize attacker-controlled MessagePack data. Both `unpackb()` and the streaming `Unpacker` API are affected. The pure-Python fallback does not exhibit this leak in the reported tests.\n\nThe report measured approximately 4 MiB retained per failed parse and 100 MiB after 25 failed parses on Windows with Python 3.14 and msgpack 1.2.2. These are reporter-provided results.\n\n### Additional impact: stale parser-stack references\n\nThe reference-ownership audit performed while fixing this leak found an\nadditional memory-safety issue in the streaming `Unpacker`.\n\nAfter `unpack()` completed a nested container, an inactive parser-stack slot\ncould retain a non-owning pointer to the decoded object. A subsequent `skip()`\ncould reactivate that slot. If parsing then failed, context cleanup treated the\nstale pointer as an owned reference and decremented it.\n\nThis corrupts the object's reference count and can result in a use-after-free\nor double `Py_DECREF` when its actual owners later release it.\n\nAlthough few users use this API, but those who do may experience crashes or unexpected errors due to a use-after-free.\n\n### Details\n\nIn `msgpack/unpack.h`, `unpack_callback_map_item()` rejects keys that are neither `str` nor `bytes`. At this point the map value has already been constructed. The early error return does not release the value reference.\n\nIn `msgpack/unpack_template.h`, the value is held in the local `obj` in `unpack_execute()`. The `CT_MAP_VALUE` error path jumps to `_failed` without decrementing that reference. Cleanup of the parser stack does not recover the value because it is not stored in the stack. The fallback checks the key before decoding the value.\n\n### Affected versions\n\nThe report reproduces the issue on **1.2.2** and reports it on development commit `475c1b7`. The affected-product field lists the reproduced release only; it is not a claim that earlier releases are unaffected.\n\nThe earliest affected release needs confirmation: the report's summary says 1.1.x through 1.2.2, while its root-cause analysis attributes introduction to commit `cd81370` (PR #673). Resolve this discrepancy before publishing a definitive affected-version range.\n\n### Reproduction\n\nRun in a disposable local process with the C extension installed:\n\n```python\nimport msgpack\n\npayload = msgpack.packb({42: b\"A\" * (4 * 1024 * 1024)}, use_bin_type=True)\nmsgpack.unpackb(payload)  # Raises ValueError; the report observes a 4 MiB leak.\n```\n\nStreaming API trigger:\n\n```python\nimport msgpack\n\npayload = msgpack.packb({42: b\"A\" * (4 * 1024 * 1024)}, use_bin_type=True)\nu = msgpack.Unpacker()\nu.feed(payload)\nlist(u)  # Same strict_map_key error path.\n```\n\n### Workarounds\n\nThe pure-Python fallback is reported not to leak on this path and may be used as a temporary workaround after application compatibility and performance checks. Request-size and rate limits may reduce the impact but do not eliminate cumulative leakage.","severity":"high","score":7.5,"published":"2026-10-27T15:04:07.000Z","modified":"2026-10-27T15:15:08.389Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"PyPI","name":"msgpack","ranges":[{"events":[{"introduced":"0"},{"fixed":"1.2.3"}],"type":"ECOSYSTEM"}],"versions":["0.5.0","0.5.1","0.5.2","0.5.3","0.5.4","0.5.5","0.5.6","0.6.0","0.6.1","0.6.2","1.0.0","1.0.0rc1","1.0.1","1.0.2","1.0.3","1.0.3rc1","1.0.4","1.0.4rc1","1.0.5","1.0.5rc1","1.0.6","1.0.6rc1","1.0.7","1.0.8","1.1.0","1.1.0rc1","1.1.0rc2","1.1.1","1.1.1rc1","1.1.2","1.2.0","1.2.0rc1","1.2.1","1.2.2"],"fixed":["1.2.3"]}],"references":["https://github.com/msgpack/msgpack-python/security/advisories/GHSA-j586-36cw-2gc2","https://nvd.nist.gov/vuln/detail/CVE-2026-114613","https://github.com/msgpack/msgpack-python/commit/620b0eb4c89cd72d4098564537624d9dbb2ce141","https://github.com/msgpack/msgpack-python","https://github.com/msgpack/msgpack-python/releases/tag/v1.2.3"],"sources":[{"name":"OSV","id":"GHSA-j586-36cw-2gc2","modified":"2026-10-27T15:15:08.389118415Z","url":"https://osv.dev/vulnerability/GHSA-j586-36cw-2gc2"}],"assessments":[{"source":"OSV","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5}]}