These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-10-14T14:16:36.219Z and has not been modified since then. Defenders should prioritize verifying exposure in systems using OW2 ASM 1.4.3 before 9.11 and assess the impact of potential denial-of-service attacks. The vulnerability in Analyzer.analyze() allows attackers to exhaust memory and CPU via crafte [truncated]
The CVE-2026-110270 vulnerability in OW2 ASM 3.0 before 9.11 involves an uncontrolled memory allocation issue in the asm-commons JSRInlinerAdapter, which can lead to an OutOfMemoryError, causing the JVM to crash. This vulnerability is rated with a CVSS score of 6.8 and a severity of MEDIUM. The vulnerability allows attackers to supply crafted class files with nested subroutines to force O(2^n) memory allo [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-10-14T14:16:34.949Z and has not been modified since then. The vulnerability affects OW2 ASM 3.0 before 9.11, allowing attackers to exhaust the stack via deeply nested generic type signatures in SignatureReader.parseType(). Defenders should assess exposure and prioritize verification and potential updat [truncated]
A vulnerability in OW2 ASM 3.1 before 9.11 allows attackers to exhaust memory by supplying crafted class files, leading to denial of service. The vulnerability is caused by excessive memory allocation in the asm-commons AdviceAdapter. Attackers can craft bytecode with many forward jump targets in constructors, causing unbounded stack copies in forwardJumpStackFrames and allocation of hundreds of megabytes [truncated]
A denial of service vulnerability exists in OW2 ASM 3.0 before 9.11, allowing attackers to exhaust CPU by supplying crafted class files processed with ClassWriter.COMPUTE_FRAMES. The vulnerability is caused by the unbounded MethodWriter.computeAllFrames() fix point algorithm, which can converge slowly and tie up transforming threads for an unbounded time.
The CVE-2026-110260 vulnerability in OW2 ASM 3.0 before 9.11 involves a quadratic memory allocation issue via exception handlers in MethodWriter.computeMaxStackAndLocal() and computeAllFrames(). This flaw allows attackers to supply crafted class files with thousands of overlapping exception handlers, leading to excessive Edge allocations and potential OutOfMemoryError crashes in the JVM. Defenders should [truncated]
A vulnerability in OW2 ASM 3.0 before 9.11 allows for uncontrolled recursion via ClassWriter.replaceAsmInstructions(), potentially leading to denial of service through crafted class files. The vulnerability is caused by the lack of proper bounds checking on the number of forward jumps in a method, allowing an attacker to trigger unbounded recursion and a StackOverflowError during transformation. Defenders [truncated]
The OW2 ASM 3.0 before 9.11 contains an excessive memory allocation vulnerability in Label.addSubroutineRetSuccessors() that fails to enforce the single-RET-per-JSR rule. This vulnerability can lead to JVM crashes due to roughly 2 GB allocations triggered by crafted invalid class files with multiple RET instructions for one JSR. Defenders should assess exposure, prioritize verification, and consider upgra [truncated]
A vulnerability in OW2 ASM 5.0 before 9.11 allows for excessive memory allocation via the BootstrapMethods attribute, potentially leading to an OutOfMemoryError that crashes the JVM. This issue is caused by the ClassReader.readBootstrapMethodsAttribute() method sizing an int array from num_bootstrap_methods without validating attribute_length. An attacker can supply a crafted class file of about 100 bytes [truncated]