CVE-2026-102554 Denial of Service via Eager Array Allocation During Deserialization in Guava
PublishedAllocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, CompactHashSet, or MapMakerIntern...