CVE-2026-48502 | MessagePack-CSharp MessagePack for C# up to 2.5.300/3.1.6 MessagePackReader.ReadDateTime out-of-bounds (GHSA-382j-8mxh-c7x2)

A vulnerability was found in MessagePack-CSharp MessagePack for C# up to 2.5.300/3.1.6. It has been declared as problematic. This vulnerability affects the function MessagePackReader.ReadDateTime. Executing a manipulation can lead to out-of-bounds read.

This vulnerability is handled as CVE-2026-48502. The attack can be executed remotely. There is not any exploit available.

It is recommended to upgrade the affected component.