CVE-2026-115775

A flaw was found in Twisted. An unauthenticated remote attacker can cause a Denial of Service DoS by exhausting server memory. The issue occurs because the XML stream parser retains unfinished elements in memory without enforcing size or element count limits. By transmitting a continuous stream o...

jackson-dataformat-xml:XmlDeserializerFuzzer: Security exception in com.sun.xml.stream.XMLDocumentFragmentScannerImpl$FragmentContentDriver.next

Project: https://github.com/FasterXML/jackson-dataformat-xml.git Detailed Report: https://oss-fuzz.com/testcase?key=5933766865387520 Project: jackson-dataformat-xml Fuzzing Engine: libFuzzer Fuzz Target: XmlDeserializerFuzzer Job Type: libfuzzerasanjackson-dataformat-xml Platform Id: linux Crash...