CVE-2026-104895

A flaw was found in jackson-dataformat-smile. A remote attacker can cause a Denial of Service DoS by submitting specially crafted binary data to an asynchronous parsing endpoint. The parser fails to validate length prefixes, allowing untrusted input to trigger integer overflows or excessive memor...