com.google.guava vulnerabilities

Products

• com.google.guava/guava 4
• com.google.guava/guava-jdk5 1

Latest com.google.guava CVEs

Newest publication first

1. CVE-2026-102554 Denial of Service via Eager Array Allocation During Deserialization in Guava

   Published 2026-10-09

   High·CVSS 8.2 EPSS 0.35%

   Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, CompactHashSet, or MapMakerIntern...

2. CVE-2023-2976 Use of temporary directory for file creation in `FileBackedOutputStream` in Guava

   Published 2023-06-14

   High·CVSS 7.1 EPSS 0.25%

   Use of Java's default temporary directory for file creation in FileBackedOutputStream in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to a...

3. CVE-2020-8908 Temp directory permission issue in Guava

   Published 2020-12-10

   Low·CVSS 3.3 EPSS 0.92%

   A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.Files.createTempDir(). By default, on unix-like systems, the...

4. CVE-2018-10237 Denial of Service in Google Guava

   Published 2018-04-26

   Medium·CVSS 5.9 EPSS 8.4%

   Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class (when serialized with J...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.