{"id":"CVE-2026-88350","title":"An integer overflow vulnerability exists in MPack 1.1.1 in mpack_node_cstr_alloc() and mpack_node_utf8_cstr_alloc().","summary":"An integer overflow vulnerability exists in MPack 1.1.1 in mpack_node_cstr_alloc() and mpack_node_utf8_cstr_alloc().","severity":"none","published":"2026-09-22","updated":"2026-09-24","sourceUpdated":"2026-09-24T21:19:05.340","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-88350","references":[{"url":"https://github.com/ludocode/mpack/commit/3d54d1215bdb5478d3ddecaf85884c58b382cd9b","label":"cve@mitre.org"},{"url":"https://github.com/ludocode/mpack/issues/124","label":"cve@mitre.org"}],"tags":["nvd","cve.org"],"epss":0.00198,"epssPercentile":0.08468,"ingestedAt":"2026-09-22T20:10:15.096Z","slug":"CVE-2026-88350","body":"## Overview\n\nAn integer overflow vulnerability exists in MPack 1.1.1 in mpack_node_cstr_alloc() and mpack_node_utf8_cstr_alloc().\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}