136 matches found
CVE-2026-102554
A flaw was found in Google Guava. During Java object deserialization—the process of converting stored data back into active program objects—memory is eagerly allocated based on caller-specified size parameters without proper throttling or limits. An attacker can exploit this issue by providing a...
CLEANSTART-2026-CK79983 Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1
Security vulnerability affects the strimzi-kafka-operator package. Use of Java's default temporary directory for file creation in FileBackedOutputStream in Google Guava versions 1...
CLEANSTART-2026-RP19895 Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4
Security vulnerability affects the elasticsearch package. Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4...
UBUNTU-CVE-2026-102554
Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, CompactHashSet, or MapMakerInternalMap instances,...
DEBIAN-CVE-2026-102554
Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, CompactHashSet, or MapMakerInternalMap instances,...
CVE-2026-102554
Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, CompactHashSet, or MapMakerInternalMap instances,...
CVE-2026-102554
Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, CompactHashSet, or MapMakerInternalMap instances,...
CVE-2026-102554 Denial of Service via Eager Array Allocation During Deserialization in Guava
Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, CompactHashSet, or MapMakerInternalMap instances,...
CVE-2026-102554 Denial of Service via Eager Array Allocation During Deserialization in Guava
Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, CompactHashSet, or MapMakerInternalMap instances,...
EUVD-2026-95889
Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, CompactHashSet, or MapMakerInternalMap instances,...
CVE-2026-102554
Google Guava versions 4.0 through 33.7.1 are vulnerable to a Denial of Service via OutOfMemoryError due to the allocation of resources without limits or throttling (CWE-770 ) during Java object deserialization. The root cause is that when deserializing CompactHashMap , CompactHashSet , or MapMake...
CVE-2026-102554
Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, CompactHashSet, or MapMakerInternalMap instances,...
CVE-2026-102554: Allocation of Resources Without Limits or Throttling
Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, CompactHashSet, or MapMakerInternalMap instances,...
PT-2026-108952
Name of the Vulnerable Software and Affected Versions Google Guava versions 4.0 through 33.7.1 Description An issue exists during Java object deserialization where resources are allocated without limits or throttling. When deserializing CompactHashMap, CompactHashSet, or MapMakerInternalMap...
CLEANSTART-2026-NL20798 Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1
Security vulnerability affects the apache-hive package. Use of Java's default temporary directory for file creation in FileBackedOutputStream in Google Guava versions 1...
CLEANSTART-2026-NG64377 Unbounded memory allocation in Google Guava 11
Security vulnerability affects the apache-hive package. Unbounded memory allocation in Google Guava 11...
CLSA-2026-1774484488 TuxCare security update for com.google.guava (1 CVE)
TuxCare rebuilt 4 com.google.guava packages to address 1 CVE. Fixed in 25.1-jre-tuxcare.1...
CLSA-2025-1752019363 TuxCare security update for com.google.guava (2 CVEs)
TuxCare rebuilt 5 com.google.guava packages to address 2 CVEs. Fixed in 31.1-jre.tuxcare.1...
CLSA-2024-1726444801 TuxCare security update for com.google.guava (2 CVEs)
TuxCare rebuilt 5 com.google.guava packages to address 2 CVEs. Fixed in 30.1-jre.tuxcare...
Security Bulletin: Vulnerabilities in hoek, Bouncy Castle Inc, Spring Framework, golang, Apache Commons, semver and Google Guava might affect IBM Storage Defender Copy Data Management
Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in hoek, Bouncy Castle Inc, Spring Framework, golang, Apache Commons, semver and Google Guava. Vulnerabilities include allowing a malicious user to modify the prototype of "Object" via proto, causing the addition...