Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion via the readLength function. An attacker can exhaust the receiver thread's JVM stack and cause a StackOverflowError by sending a stream of repeated E-language prefixes to the socket, resulting in unbounded...

CVE-2026-40007

Apache IoTDB versions 1.0.0 before 2.0.10 are vulnerable to Uncontrolled Recursion and Uncontrolled Resource Consumption . When the pipe_air_gap_receiver_enabled configuration is set to true , the AirGap receiver's readLength method recursively calls itself upon identifying the E-language prefix ...