CVE-2026-22187-Bio-Formats-unsafe-Java-deserialization-via-.bfmemo

CVE-2026-22187-Bio-Formats-unsafe-Java-deserialization-via-.bfmemo Bio-Formats ≤ 8.3.0 は、画像処理中に攻撃者が制御する .bfmemo キャッシュファイルの安全でない Java デシリアライゼーションを実行します。細工された .bfmemo は、信頼できないデータのデシリアライゼーションを引き起こす可能性があります（DoS／ロジック操作、ガジェットチェーンが存在する場合は潜在的に RCE）。 安全な再現（ローカルのみ）...

Exploit for CVE-2026-22187

CVE-2026-22187-Bio-Formats-unsafe-Java-deserialization-via-.bf...

CVE-2026-22187

Bio-Formats versions up to and including 8.3.0 perform unsafe Java deserialization of attacker-controlled memoization cache files .bfmemo during image processing. The loci.formats.Memoizer class automatically loads and deserializes memo files associated with images without validation, integrity...

CVE-2026-22187

Bio-Formats

Bio-Formats 代码问题漏洞

Bio-Formats is an Open Microscopy Environment open source Java library for reading and writing various microscopy imaging proprietary file formats. A code issue vulnerability exists in Bio-Formats 8.3.0 and prior versions that stems from performing insecure Java deserialization of...

CVE-2026-22187: Deserialization of Untrusted Data

Bio-Formats versions up to and including 8.3.0 perform unsafe Java deserialization of attacker-controlled memoization cache files .bfmemo during image processing. The loci.formats.Memoizer class automatically loads and deserializes memo files associated with images without validation, integrity...