Ow2

10 CVEs in 1 Ow2 product, including Asm. Newest: CVE-2026-112046 (2026-10-18). Severity, EPSS and public exploits for each.

Ow2 products with known CVEs

ProductCVEs
Asm10
Ow2 CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-112046Medium5.52026-10-18OW2 ASM 9.11 before 9.11.1 contains an infinite loop vulnerability in Label.resolve() caused by 16-bit forward-reference offsets truncating when rewritten meth…
CVE-2026-110591Medium5.52026-10-14OW2 ASM 1.4.3 before 9.11 contains an excessive resource consumption vulnerability in Analyzer.analyze() that allows attackers to exhaust memory and CPU via cr…
CVE-2026-110270Medium5.52026-10-14OW2 ASM 3.0 before 9.11 contains an uncontrolled memory allocation vulnerability in the asm-commons JSRInlinerAdapter that inlines JSR/RET subroutines without…
CVE-2026-110263Medium5.52026-10-14OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in SignatureReader.parseType() that allows attackers to exhaust the stack via deeply n…
CVE-2026-110262Low3.32026-10-14OW2 ASM 3.1 before 9.11 contains an excessive memory allocation vulnerability in the asm-commons AdviceAdapter that allows attackers to exhaust memory by suppl…
CVE-2026-110261Medium5.52026-10-14OW2 ASM 3.0 before 9.11 contains a denial of service vulnerability that allows attackers to exhaust CPU by supplying crafted class files processed with ClassWr…
CVE-2026-110260Medium5.52026-10-14OW2 ASM 3.0 before 9.11 contains a quadratic memory allocation vulnerability in MethodWriter.computeMaxStackAndLocal() and computeAllFrames() when using COMPUT…
CVE-2026-110259Medium5.52026-10-14OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in ClassWriter.replaceAsmInstructions() that allows attackers to cause denial of servi…
CVE-2026-110258Medium5.52026-10-14OW2 ASM 3.0 before 9.11 contains an excessive memory allocation vulnerability in Label.addSubroutineRetSuccessors() that fails to enforce the single-RET-per-JS…
CVE-2026-110257Medium5.52026-10-14OW2 ASM 5.0 before 9.11 contains an excessive memory allocation vulnerability in ClassReader.readBootstrapMethodsAttribute() that sizes an int array from num_b…