CVE-2026-110258 in ASMinformación

Resumen

por MITRE • 2026-10-14

OW2 ASM 3.0 before 9.11 contains an excessive memory allocation vulnerability in Label.addSubroutineRetSuccessors() that fails to enforce the single-RET-per-JSR rule. Attackers can supply a crafted invalid class file with multiple RET instructions for one JSR, triggering a roughly 2 GB allocation that crashes the JVM.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

VulnCheck

Reservar

2026-10-13

Divulgación

2026-10-14

Moderación

aceptado

Artículo

VDB-419900

EPSS

0.00000

KEV

no

Actividades

bajo

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-110258
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-110258
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-110258/

◂ AnteriorVisión De ConjuntoPróximo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!