CVE-2026-102554

Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, CompactHashSet, or MapMakerInternalMap instances,...

EUVD-2026-95889

Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, CompactHashSet, or MapMakerInternalMap instances,...

CVE-2026-102554

Google Guava versions 4.0 through 33.7.1 are vulnerable to a Denial of Service via OutOfMemoryError due to the allocation of resources without limits or throttling (CWE-770 ) during Java object deserialization. The root cause is that when deserializing CompactHashMap , CompactHashSet , or MapMake...

CVE-2026-102554 Denial of Service via Eager Array Allocation During Deserialization in Guava

Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, CompactHashSet, or MapMakerInternalMap instances,...