[ Vendor · 10 CVEs ]
OW2
CVEs affecting OW2 published in the last 30 days, plus any OW2 CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-112046 | 18 Oct 2026 | CVSS 5.5 | OW2 ASMOW2 ASM 9.11 before 9.11.1 contains an infinite loop vulnerability in Label.resolve() caused by 16-bit forward-reference offsets truncating when… | |
| CVE-2026-110591 | 14 Oct 2026 | CVSS 5.5 | OW2 ASMOW2 ASM 1.4.3 before 9.11 contains an excessive resource consumption vulnerability in Analyzer.analyze() that allows attackers to exhaust memory and… | |
| CVE-2026-110262 | 14 Oct 2026 | CVSS 3.3 | OW2 ASMOW2 ASM 3.1 before 9.11 contains an excessive memory allocation vulnerability in the asm-commons AdviceAdapter that allows attackers to exhaust… | |
| CVE-2026-110263 | 14 Oct 2026 | CVSS 5.5 | OW2 ASMOW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in SignatureReader.parseType() that allows attackers to exhaust the stack… | |
| CVE-2026-110270 | 14 Oct 2026 | CVSS 5.5 | OW2 ASMOW2 ASM 3.0 before 9.11 contains an uncontrolled memory allocation vulnerability in the asm-commons JSRInlinerAdapter that inlines JSR/RET… | |
| CVE-2026-110257 | 14 Oct 2026 | CVSS 5.5 | OW2 ASMOW2 ASM 5.0 before 9.11 contains an excessive memory allocation vulnerability in ClassReader.readBootstrapMethodsAttribute() that sizes an int array… | |
| CVE-2026-110258 | 14 Oct 2026 | CVSS 5.5 | OW2 ASMOW2 ASM 3.0 before 9.11 contains an excessive memory allocation vulnerability in Label.addSubroutineRetSuccessors() that fails to enforce the… | |
| CVE-2026-110259 | 14 Oct 2026 | CVSS 5.5 | OW2 ASMOW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in ClassWriter.replaceAsmInstructions() that allows attackers to cause… | |
| CVE-2026-110260 | 14 Oct 2026 | CVSS 5.5 | OW2 ASMOW2 ASM 3.0 before 9.11 contains a quadratic memory allocation vulnerability in MethodWriter.computeMaxStackAndLocal() and computeAllFrames() when… | |
| CVE-2026-110261 | 14 Oct 2026 | CVSS 5.5 | OW2 ASMOW2 ASM 3.0 before 9.11 contains a denial of service vulnerability that allows attackers to exhaust CPU by supplying crafted class files processed… |