CVE-2026-110257 affecting package objectweb-asm for versions less than 9.11.1-1

CVE-2026-110257 affecting package objectweb-asm for versions less than 9.11.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-110263 affecting package objectweb-asm for versions less than 9.11.1-1

CVE-2026-110263 affecting package objectweb-asm for versions less than 9.11.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-110261 affecting package objectweb-asm for versions less than 9.11.1-1

CVE-2026-110261 affecting package objectweb-asm for versions less than 9.11.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-110591 affecting package objectweb-asm for versions less than 9.11.1-1

CVE-2026-110591 affecting package objectweb-asm for versions less than 9.11.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-110259 affecting package objectweb-asm for versions less than 9.11.1-1

CVE-2026-110259 affecting package objectweb-asm for versions less than 9.11.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-110260 affecting package objectweb-asm for versions less than 9.11.1-1

CVE-2026-110260 affecting package objectweb-asm for versions less than 9.11.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-110270 affecting package objectweb-asm for versions less than 9.11.1-1

CVE-2026-110270 affecting package objectweb-asm for versions less than 9.11.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-110258 affecting package objectweb-asm for versions less than 9.11.1-1

CVE-2026-110258 affecting package objectweb-asm for versions less than 9.11.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-110262 affecting package objectweb-asm for versions less than 9.11.1-1

CVE-2026-110262 affecting package objectweb-asm for versions less than 9.11.1-1. An upgraded version of the package is available that resolves this issue...

AZL-108414 CVE-2026-110591 affecting package objectweb-asm for versions less than 9.11.1-1

OW2 ASM 1.4.3 before 9.11 contains an excessive resource consumption vulnerability in Analyzer.analyze that allows attackers to exhaust memory and CPU via crafted class files. Attackers can supply class files analysed through BasicVerifier, SimpleVerifier or SourceInterpreter to trigger unbounded...

AZL-108417 CVE-2026-110263 affecting package objectweb-asm for versions less than 9.11.1-1

OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in SignatureReader.parseType that allows attackers to exhaust the stack via deeply nested generic type signatures. Attackers can supply a crafted class file with a long Signature attribute containing many nested type argumen...

AZL-108429 CVE-2026-110270 affecting package objectweb-asm for versions less than 9.11.1-1

OW2 ASM 3.0 before 9.11 contains an uncontrolled memory allocation vulnerability in the asm-commons JSRInlinerAdapter that inlines JSR/RET subroutines without memory or work limits. Attackers can supply a crafted class file with nested subroutines to force O2^n memory allocation, causing an...

AZL-108423 CVE-2026-110262 affecting package objectweb-asm for versions less than 9.11.1-1

OW2 ASM 3.1 before 9.11 contains an excessive memory allocation vulnerability in the asm-commons AdviceAdapter that allows attackers to exhaust memory by supplying crafted class files. Attackers can craft bytecode with many forward jump targets in constructors, causing unbounded stack copies in...

AZL-108426 CVE-2026-110257 affecting package objectweb-asm for versions less than 9.11.1-1

OW2 ASM 5.0 before 9.11 contains an excessive memory allocation vulnerability in ClassReader.readBootstrapMethodsAttribute that sizes an int array from numbootstrapmethods without validating attributelength. Attackers can supply a crafted class file of about 100 bytes that forces roughly 2 GB...

AZL-112129 CVE-2026-110259 affecting package objectweb-asm for versions less than 9.11.1-1

OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in ClassWriter.replaceAsmInstructions that allows attackers to cause denial of service through crafted class files. Attackers can supply a class with a large method containing many long forward jumps, triggering unbounded...

AZL-108420 CVE-2026-110258 affecting package objectweb-asm for versions less than 9.11.1-1

OW2 ASM 3.0 before 9.11 contains an excessive memory allocation vulnerability in Label.addSubroutineRetSuccessors that fails to enforce the single-RET-per-JSR rule. Attackers can supply a crafted invalid class file with multiple RET instructions for one JSR, triggering a roughly 2 GB allocation...

AZL-108408 CVE-2026-110260 affecting package objectweb-asm for versions less than 9.11.1-1

OW2 ASM 3.0 before 9.11 contains a quadratic memory allocation vulnerability in MethodWriter.computeMaxStackAndLocal and computeAllFrames when using COMPUTEMAXS or COMPUTEFRAMES. Attackers can supply a crafted class file with thousands of overlapping exception handlers, causing excessive Edge...

AZL-108411 CVE-2026-110261 affecting package objectweb-asm for versions less than 9.11.1-1

OW2 ASM 3.0 before 9.11 contains a denial of service vulnerability that allows attackers to exhaust CPU by supplying crafted class files processed with ClassWriter.COMPUTEFRAMES. Attackers can craft methods that make the unbounded MethodWriter.computeAllFrames fix point algorithm converge slowly,...

EUVD-2005-1963

Malware in sbrugna...

CVE-2005-1961

Unknown vulnerability in ObjectWeb Consortium C-JDBC before 1.3.1 allows local users to bypass intended access restrictions and obtain the cache results from another user...