CVE-2026-110591 in ASM
Tóm tắt
Bởi MITRE • 14/10/2026
OW2 ASM 1.4.3 before 9.11 contains an excessive resource consumption vulnerability in Analyzer.analyze() that allows attackers to exhaust memory and CPU via crafted class files. Attackers can supply class files analysed through BasicVerifier, SimpleVerifier or SourceInterpreter to trigger unbounded per-instruction Frame allocation and fix point iterations, causing denial of service.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.