Stack Overflow Vulnerability in Apache Qpid Proton C by Apache
CVE-2026-105042

Currently unrated

Key Information:

Vendor

Apache
Status
Apache Qpid Proton C
Vendor
CVE Published:
29 October 2026

What is CVE-2026-105042?

A vulnerability exists in Apache Qpid Proton C, where a deeply nested message body processed by pn_message_body() can lead to stack overflow, potentially causing application crashes. Users are strongly advised to upgrade to version 0.41.1 to mitigate this issue and enhance application stability.

Affected Version(s)

Apache Qpid Proton C 0 <= 0.40.0

References

https://lists.apache.org/thread.html/7v54gx7o1ptxcz3h9549...
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

zhangph@yandex.com
Gjoko Krstic <gjoko@zeroscience.mk>
.