Vulnerabilidades de FasterXML jackson-dataformats-binary (CVE)

Registros CVE publicados para FasterXML jackson-dataformats-binary, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

2 resultados

7.5Alta

CVE-2026-68496 hace 1 mes

jackson-dataformats-binary: Smile parser does not enforce StreamReadConstraints.maxNameLength, enabling memory-exhaustion denial of service

FasterXML jackson-dataformats-binary

The Smile parser in FasterXML jackson-dataformats-binary never invokes StreamReadConstraints.validateNameLength() when decoding JSON object property names, so the maxNameLength limit is not enforced for this format. SmileParser._handleLongFieldName() grows it…

7.5Alta

CVE-2026-68495 hace 1 mes

jackson-dataformats-binary: CBOR parser does not enforce StreamReadConstraints.maxNameLength, enabling memory-exhaustion denial of service

FasterXML jackson-dataformats-binary

The CBOR parser in FasterXML jackson-dataformats-binary never invokes StreamReadConstraints.validateNameLength() when decoding JSON object property names, so the maxNameLength limit is not enforced for this format. CBORParser._decodeLongerName() decodes a def…