CVE-2026-110591

OW2 ASM versions 1.4.3 before 9.11 are vulnerable to excessive resource consumption within the Analyzer.analyze() function. An attacker can provide specially crafted class files analyzed via BasicVerifier, SimpleVerifier, or SourceInterpreter to trigger unbounded per-instruction Frame allocation ...

CVE-2026-110591 OW2 ASM 1.4.3 before 9.11 Excessive Resource Consumption via Analyzer

OW2 ASM 1.4.3 before 9.11 contains an excessive resource consumption vulnerability in Analyzer.analyze that allows attackers to exhaust memory and CPU via crafted class files. Attackers can supply class files analysed through BasicVerifier, SimpleVerifier or SourceInterpreter to trigger unbounded...

EUVD-2026-101219

OW2 ASM 1.4.3 before 9.11 contains an excessive resource consumption vulnerability in Analyzer.analyze that allows attackers to exhaust memory and CPU via crafted class files. Attackers can supply class files analysed through BasicVerifier, SimpleVerifier or SourceInterpreter to trigger unbounded...