CVE-2026-61547

Summary

A heap buffer overflow in rabbitmq-c prior to v0.17.0 occurs when amqp_send_frame() processes oversized AMQP_FRAME_BODY payloads due to missing length validation in amqp_frame_to_bytes(), enabling out-of-bounds writes that cause crashes or memory corruption.

Exploitability

Exploitation requires an attacker-controlled application to pass a maliciously oversized body fragment to the public amqp_send_frame() API, which is unlikely unless the application itself is compromised or misconfigured to accept untrusted frame payloads.

Blast radius

Successful exploitation could lead to remote code execution or denial of service for services using rabbitmq-c, potentially affecting any system relying on this library for RabbitMQ communication.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to rabbitmq-c version 0.17.0 or later, which contains the patch that validates body fragment size before copying into the outbound buffer.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.