CVE-2026-110257 | OW2 ASM up to 9.10 ClassReader ClassReader.readBootstrapMethodsAttribute memory allocation

October 14, 2026 Yanac

A vulnerability labeled as problematic has been found in OW2 ASM up to 9.10. The affected element is the function ClassReader.readBootstrapMethodsAttribute of the component ClassReader. The manipulation results in uncontrolled memory allocation.

This vulnerability was named CVE-2026-110257. The attack needs to be approached locally. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More