What is GHSA-444m-px7r-qpvv?

GHSA-444m-px7r-qpvv is a security advisory published by GitHub Security Advisories with Medium severity. weixin4j has Improperly Controlled Sequential Memory Allocation

Which CVE IDs does GHSA-444m-px7r-qpvv cover?

GHSA-444m-px7r-qpvv covers the following CVE IDs: CVE-2026-24819. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-444m-px7r-qpvv?

GHSA-444m-px7r-qpvv affects 1 product, including: maven/com.foxinmy:weixin4j-base:\u003c= 1.10.2.

GHSA-444m-px7r-qpvvMedium

weixin4j has Improperly Controlled Sequential Memory Allocation

Vendor

GitHub Security Advisories

Published

January 27, 2026

Last Modified

January 28, 2026

🔗 CVE IDs covered (1)

CVE-2026-24819 →

📋 Description

Improperly Controlled Sequential Memory Allocation vulnerability in foxinmy weixin4j (weixin4j-base/src/main/java/com/foxinmy/weixin4j/util modules). This vulnerability is associated with program files CharArrayBuffer.Java, ClassUtil.Java.

This issue affects all versions of weixin4j. A path is available: d1c8258

🎯 Affected products1

maven/com.foxinmy:weixin4j-base:<= 1.10.2

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-24819
https://github.com/foxinmy/weixin4j/pull/229
https://github.com/foxinmy/weixin4j/commit/d1c825835802cd3a0c04772be1220ff4476ea27c
https://github.com/advisories/GHSA-444m-px7r-qpvv