Product

org.ow2.asm/asm-analysis vulnerabilities

1 published CVE affecting org.ow2.asm/asm-analysis, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 0
Medium: 1
Low: 0
Unscored: 0
CISA KEV: 0

Latest org.ow2.asm/asm-analysis CVEs

Newest publication first

CVE-2026-110591 OW2 ASM 1.4.3 before 9.11 Excessive Resource Consumption via Analyzer
Published 2026-10-14

MediumCVSS 6.8 EPSS 0.18%

OW2 ASM 1.4.3 before 9.11 contains an excessive resource consumption vulnerability in Analyzer.analyze() that allows attackers to exhaust memory and CPU via crafted class files. Attackers can supply class files analysed through BasicVerifier, SimpleVerifier or SourceInterpreter t...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

org.ow2.asm/asm-analysis vulnerabilities

Latest org.ow2.asm/asm-analysis CVEs

CVE-2026-110591 OW2 ASM 1.4.3 before 9.11 Excessive Resource Consumption via Analyzer