GHSA-h33j-vrhg-4q7jHighCVSS 7.5

A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as...

Published
August 11, 2026
Last Modified
August 12, 2026

🔗 CVE IDs covered (1)

📋 Description

A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token decoder reads an attacker-controlled length field without bounds checking and attempts to allocate a byte array of that size.

🔗 References (5)