3 matches found
CVE-2026-118488 Heap exhaustion via unbounded simple string or bulk string allocation in Vert.x Redis client
In Eclipse Vert.x versions 4.0.0, 4.5.35 or 5.0.0, 5.2.2, when a malicious server keeps sending bytes on an EOL-terminated line not length-prefixed, for example a simple string 1, we'll keep growing the buffer without bounds, eventually leading to an OOM. We need to have a configurable limit for...
CVE-2026-118488 Heap exhaustion via unbounded simple string or bulk string allocation in Vert.x Redis client
In Eclipse Vert.x versions 4.0.0, 4.5.35 or 5.0.0, 5.2.2, when a malicious server keeps sending bytes on an EOL-terminated line not length-prefixed, for example a simple string 1, we'll keep growing the buffer without bounds, eventually leading to an OOM. We need to have a configurable limit for...
CVE-2026-118488: Eclipse Foundation Eclipse Vert.x: In Eclipse Vert.x versions [4.0.0, 4.5.35] or [5.0.0, 5.2.2], when a malicious server keeps sending bytes on an…
In Eclipse Vert.x versions 4.0.0, 4.5.35 or 5.0.0, 5.2.2, when a malicious server keeps sending bytes on an EOL-terminated line not length-prefixed, for example a simple string 1, we'll keep growing the buffer without bounds, eventually leading to an OOM. We need to have a configurable limit for...