{"id":"CVE-2026-105042","kind":"vulnerability","aliases":["CVE-2026-105042"],"related":[],"title":"Qpid Proton C: deeply nested message body can overflow stack and crash","description":"A message body that is deeply nested and decoded by pn_message_body() could overflow the stack and cause a crash.\n\n\n\nThis issue affects Apache Qpid Proton C: through 0.40.0.\n\n\n\nUsers are recommended to upgrade to version 0.41.1, which fixes the issue.","summary":"A message body that is deeply nested and decoded by pn_message_body() can overflow the stack in Apache Qpid Proton C through 0.40.0. The result is a crash of the process that decodes the message.","severity":"medium","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["amqp","c","package","qpid-proton"],"not_affected_if":["no-untrusted-messages","not-using-qpid-proton"],"how_to_check":"- Check the installed Qpid Proton C version, for example with `pkg-config --modversion libqpid-proton` or your package manager.\n- Look for applications that link Qpid Proton C and call `pn_message_body()` on messages received from untrusted peers.","fix":"- Apache Qpid Proton C: upgrade to `0.41.1`","status":"open","published_at":"2026-10-29T11:17:24+00:00","first_seen_at":"2026-10-29T11:24:27+00:00","triaged_at":"2026-10-29T11:25:42+00:00","updated_at":"2026-10-29T11:25:42+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-29T11:25:42Z","model":"claude-haiku-5-5","output":{"fix":"- Apache Qpid Proton C: upgrade to `0.41.1`","reach":"network","title":"Qpid Proton C: deeply nested message body can overflow stack and crash","impact":"low","summary":"A message body that is deeply nested and decoded by pn_message_body() can overflow the stack in Apache Qpid Proton C through 0.40.0. The result is a crash of the process that decodes the message.","audience":"developers","category":"package","nicknames":[],"who_cares":["qpid-proton","amqp","c"],"confidence":0.6,"fix_status":"available","needs_auth":"unknown","worst_case":"Process crashes via stack overflow while decoding a crafted message","analyst_note":"","how_to_check":"- Check the installed Qpid Proton C version, for example with `pkg-config --modversion libqpid-proton` or your package manager.\n- Look for applications that link Qpid Proton C and call `pn_message_body()` on messages received from untrusted peers.","plain_action":"","needs_analyst":false,"not_affected_if":["not-using-qpid-proton","no-untrusted-messages"],"who_is_affected":"Applications built on Apache Qpid Proton C through 0.40.0 that decode message bodies with pn_message_body(), especially those accepting messages from untrusted senders. Systems that do not use Qpid Proton C or do not decode message bodies this way can skip it. Sources do not say whether specific configurations are required.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000679,"input_tokens":4106,"output_tokens":536,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-105042':15A,18A '-2026':14A,17A '0.40.0':48B,90C '0.41.1':98C 'affect':84C 'amqp':19B 'apach':43B,85C 'bodi':7A,27B,37B,63C,73C 'c':3A,20B,46B,88C 'caus':79C 'could':74C 'crash':12A,53B,81C 'cve':13A,16A 'decod':33B,58B,69C 'deepli':4A,30B,66C 'fix':100C 'issu':83C,102C 'messag':6A,26B,36B,60B,62C,72C 'nest':5A,31B,67C 'overflow':9A,39B,75C 'packag':21B 'pn':35B,71C 'process':56B 'proton':2A,24B,45B,87C 'qpid':1A,23B,44B,86C 'qpid-proton':22B 'recommend':93C 'result':50B 'stack':10A,41B,77C 'upgrad':95C 'user':91C 'version':97C","nicknames":[],"mitigations":[],"who_affected":"Applications built on Apache Qpid Proton C through 0.40.0 that decode message bodies with pn_message_body(), especially those accepting messages from untrusted senders. Systems that do not use Qpid Proton C or do not decode message bodies this way can skip it. Sources do not say whether specific configurations are required.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"developers","plain_action":null,"first_public_at":"2026-10-29T11:17:24+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-105042","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105042","severity":null,"published_at":"2026-10-29T11:17:24+00:00","modified_at":"2026-10-29T11:17:24+00:00","first_seen_at":"2026-10-29T11:24:27+00:00","fetched_at":"2026-10-29T11:24:27+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}