CVE-2026-112046

OW2 ASM 9.11 before 9.11.1 contains an infinite loop vulnerability in Label.resolve caused by 16-bit forward-reference offsets truncating when rewritten methods exceed 64 KB. Attackers can supply crafted class files whose transformed code grows past 65535 bytes, hanging ClassReader.accept and...