alanxz rabbitmq-c up to 0.16.x Frame Serialization amqp_frame_to_bytes heap-based overflow

Summaryinfo

A vulnerability labeled as critical has been found in alanxz rabbitmq-c up to 0.16.x. Impacted is the function amqp_frame_to_bytes of the component Frame Serialization. Such manipulation leads to heap-based overflow. This vulnerability is documented as CVE-2026-61547. The attack can be executed remotely. There is not any exploit available. The affected component should be upgraded.

Detailsinfo

A vulnerability, which was classified as critical, has been found in alanxz rabbitmq-c up to 0.16.x. Affected by this issue is the function amqp_frame_to_bytes of the component Frame Serialization. The manipulation with an unknown input leads to a heap-based overflow vulnerability. Using CWE to declare the problem leads to CWE-122. The product writes past the end of a buffer that was allocated on the heap. Impacted is confidentiality, integrity, and availability. CVE summarizes:

rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to version 0.17.0, a heap buffer overflow exists in rabbitmq-c when the public amqp_send_frame() API is used to serialize an oversized AMQP_FRAME_BODY. The issue occurs because amqp_frame_to_bytes() copies frame.payload.body_fragment.len bytes into the connection outbound buffer without validating that the body fragment fits within the allocated frame buffer. An application that passes an oversized body frame to amqp_send_frame() can trigger a heap out-of-bounds write, resulting in process crash and memory corruption. This issue has been patched in version 0.17.0.

The advisory is shared for download at github.com. This vulnerability is handled as CVE-2026-61547 since 07/10/2026. The exploitation is known to be easy. The attack may be launched remotely. No form of authentication is required for exploitation. There are known technical details, but no exploit is available.

Upgrading to version 0.17.0 eliminates this vulnerability.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• alanxz

Name

• rabbitmq-c

Version

• 0.1
• 0.2
• 0.3
• 0.4
• 0.5
• 0.6
• 0.7
• 0.8
• 0.9
• 0.10
• 0.11
• 0.12
• 0.13
• 0.14
• 0.15
• 0.16

Website

• Product: https://github.com/alanxz/rabbitmq-c/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion