Search: CVE-2026-89059

CVE-2026-89059 is a vulnerability in RESTEasy's IIOImageProvider component used in the Red Hat build of Quarkus. It allows a remote, unauthenticated attacker to send a crafted image with extremely large declared dimensions, causing excessive memory allocation and JVM heap exhaustion, leading to denial of service. The vulnerability affects certain versions of Red Hat build of Quarkus prior to fixed releases. The CVSS score is 7.5 (high severity) with no impact on confidentiality or integrity but high impact on availability.