Search: CVE-2026-102554

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.2	EPSS 0.4%	CVE-2026-102554Google Guava · Unthrottled Resource Allocation High8.2EPSS 0.4%2026-10-09CVE Database V5CVE-2026-102554 Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, CompactHashSet, or MapMakerInternalMap instances, Guava eagerly allocates an array based on a caller-specified size parameter without throttling, permitting memory exhaustion from crafted serialization streams. EPSS 0.4%Vulnerability CWE-770	CVE Database V5	2026-10-09

Page 1 of 1 · 11 duplicate CVE records merged