CVE-2026-78437 | Apache Tomcat up to 9.0.121/10.1.59/11.0.25 sizeof() on a pointer type

A vulnerability was found in Apache Tomcat up to 9.0.121/10.1.59/11.0.25. It has been declared as problematic. The impacted element is an unknown function. Such manipulation leads to use of sizeof() on a pointer type.

This vulnerability is uniquely identified as CVE-2026-78437. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More