Google Guava: CompactHashMap/CompactHashSet/MapMakerInternalMap deserialization triggers uncontrolled memory allocation

CompactHashMap/CompactHashSet/MapMakerInternalMap native deserialization triggers uncontrolled memory allocation Summary CompactHashMap, CompactHashSet, and MapMakerInternalMap implement readObjectObjectInputStream by reading an attacker-controlled elementCount or initialCapacity from the stream...

GHSA-XXPH-C9WW-HJ94 Google Guava: CompactHashMap/CompactHashSet/MapMakerInternalMap deserialization triggers uncontrolled memory allocation

CompactHashMap/CompactHashSet/MapMakerInternalMap native deserialization triggers uncontrolled memory allocation Summary CompactHashMap, CompactHashSet, and MapMakerInternalMap implement readObjectObjectInputStream by reading an attacker-controlled elementCount or initialCapacity from the stream...

Allocation of Resources Without Limits or Throttling

Overview com.google.guava:guava is a set of core libraries that includes new collection types such as multimap and multiset,immutable collections, a graph library, functional types, an in-memory cache and more. Affected versions of this package are vulnerable to Allocation of Resources Without...