OW2 ASM
10 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-112046 | 9.11 – < 9.11.1 | OW2 ASM 9.11 before 9.11.1 Denial of Service via Infinite Loop in Label.resolve() | MEDIUM 6.8 | 0.1 % | ||
| CVE-2026-110591 | 1.4.3 – < 9.11 | OW2 ASM 1.4.3 before 9.11 Excessive Resource Consumption via Analyzer | MEDIUM 6.8 | 0.2 % | ||
| CVE-2026-110270 | 3.0 – < 9.11 | OW2 ASM 3.0 before 9.11 Exponential Memory Allocation in JSRInlinerAdapter | MEDIUM 6.8 | 0.2 % | ||
| CVE-2026-110263 | 3.0 – < 9.11 | OW2 ASM 3.0 before 9.11 Uncontrolled Recursion in SignatureReader | MEDIUM 6.8 | 0.2 % | ||
| CVE-2026-110262 | 3.1 – < 9.11 | OW2 ASM 3.1 before 9.11 Excessive Memory Allocation in AdviceAdapter | MEDIUM 4.8 | 0.2 % | ||
| CVE-2026-110261 | 3.0 – < 9.11 | OW2 ASM 3.0 before 9.11 Excessive CPU Consumption via ClassWriter COMPUTE_FRAMES | MEDIUM 6.8 | 0.2 % | ||
| CVE-2026-110260 | 3.0 – < 9.11 | OW2 ASM 3.0 before 9.11 Quadratic Memory Allocation via Exception Handlers | MEDIUM 6.8 | 0.2 % | ||
| CVE-2026-110259 | 3.0 – < 9.11 | OW2 ASM 3.0 before 9.11 Uncontrolled Recursion via ClassWriter.replaceAsmInstructions() | MEDIUM 6.8 | 0.2 % | ||
| CVE-2026-110258 | 3.0 – < 9.11 | OW2 ASM 3.0 before 9.11 Excessive Memory Allocation via Multiple RET Instructions | MEDIUM 6.8 | 0.2 % | ||
| CVE-2026-110257 | 5.0 – < 9.11 | OW2 ASM 5.0 before 9.11 Excessive Memory Allocation via BootstrapMethods Attribute | MEDIUM 6.8 | 0.2 % |