Threats tagged 'ghsa-659w-93r5-9j6m'

Apache OpenNLP AbstractModelReader in versions before 2.5.9 and before 3.0.0-M3 contains a vulnerability where unbounded array allocation can cause an OutOfMemoryError. This occurs because certain count fields read from a binary model file are not validated before being used to allocate arrays, allowing an attacker to supply a crafted model file that triggers heap exhaustion and crashes the JVM process. The issue affects any code path that deserializes .bin model files, leading to denial of service. Fixed in versions 2.5.9 and 3.0.0-M3.