CVE-2026-44236: A malicious AMQP server can send an
undersized connection.tune.frame_max value during the login
handshake. The library does not enforce the protocol minimum
frame size, reallocates its outbound buffer to an invalid size
and then writes frame data beyond it, causing a heap buffer
overflow before authentication completes.
CVE-2026-44235: An unsigned integer underflow in the frame
length computation when parsing undersized AMQP frames
bypasses bounds checks in the property and table decoders,
leading to an out-of-bounds read and client-side denial of
service.