CVE-2026-61547: A heap buffer overflow exists when the
amqp_send_frame() API is used to serialise an oversized
AMQP_FRAME_BODY frame, as memcpy() writes past the end of the
heap allocation without validating that the body fragment
fits within the allocated frame buffer.
CVE-2026-59986: An integer overflow in the amqp_decode_bytes
bounds check on 32-bit systems allows a malicious AMQP broker
to craft frames with oversized BYTES fields, resulting in an
out-of-bounds read that may expose process memory or crash the
application.