OSV-2026-1224

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/tarantool/OSV-2026-1224.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2026-1224
Published
2026-09-02T00:20:32Z
Modified
2026-10-23T12:15:03Z
Summary
Heap-buffer-overflow in mp_load_float
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=555347939

Crash type: Heap-buffer-overflow WRITE 4
Crash state:
mp_load_float
mp_decode_float
luamp_decode_with_ctx
References

Affected packages

OSS-Fuzz / tarantool

Package

Name
tarantool
Purl
pkg:generic/tarantool

Affected ranges

Type
GIT
Repo
https://github.com/tarantool/tarantool
Events
Introduced
c679fad72328070e9d94426077b8cc45c390e313
Fixed
81a8cb24a56aac8ef0145b321e661046b815ace3
Introduced
ea71e2c3be2f5271e0cfd86ff63d36f97d484c7f
Introduced
017842b2df13207ff7a817dcafd89c0d6b10c2ba
Fixed
032de62ca186810d5ce93d6625e25c16be266db8
Fixed
4f216daa14029f952714b6ec97b1bb23385bfe98
Fixed
00174ebcd854abf1cead3cdca6e43a6539248e59

Affected versions

3.*
3.6.4
3.7.1
3.7.2-entrypoint
3.8.0
3.8.1
3.8.1-entrypoint
3.8.2-entrypoint
3.9.0-entrypoint

Ecosystem specific 

{
    "severity":  "HIGH"
}

Database specific

fixed_range 
"36f5233ac875e4d5b1a9310697a84ccdb77ef5b5:81a8cb24a56aac8ef0145b321e661046b815ace3"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/tarantool/OSV-2026-1224.yaml"