CVE-2026-42440

Apache OpenNLP is vulnerable to an Out-of-Memory (OOM) Denial of Service in the AbstractModelReader component. The methods getOutcomes(), getOutcomePatterns(), and getPredicates() read a 32-bit signed integer count from a binary model stream and pass it directly to array allocations without valid...