Heap-based buffer overflow in RabbitMQ C client - CVE-2026-61547

Vulnerability identifier: #VU147319

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-61547

CWE-ID: CWE-122

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause memory corruption.

The vulnerability exists due to a heap-based buffer overflow in amqp_frame_to_bytes() when serializing an oversized AMQP_FRAME_BODY through amqp_send_frame(). A remote attacker can provide an oversized AMQP_FRAME_BODY frame to cause memory corruption.

The overflow occurs while serializing the frame, before any network communication with a RabbitMQ broker.

RabbitMQ C client
Debian Linux
openEuler
librabbitmq
librabbitmq-debuginfo
librabbitmq-debugsource
librabbitmq-devel
librabbitmq-help
librabbitmq (Debian package)

Install security update from vendor's website.

RabbitMQ C client - update to 0.17.0
librabbitmq - update to 0.9.0-9
librabbitmq-debuginfo - update to 0.9.0-9
librabbitmq-debugsource - update to 0.9.0-9
librabbitmq-devel - update to 0.9.0-9
librabbitmq-help - update to 0.9.0-9
librabbitmq (Debian package) - update to 0.15.0-1+deb13u2

• https://github.com/alanxz/rabbitmq-c/security/advisories/GHSA-hfjv-vcp3-39wh

• Multiple vulnerabilities in RabbitMQ C client
• Debian update for librabbitmq
• openEuler update for librabbitmq