{"id":"CVE-2026-112046","title":"org.ow2.asm/asm: OW2 ASM: Denial of Service via infinite loop in Label.resolve() (CVE-2026-112046)","summary":"A flaw was found in OW2 ASM. An attacker can cause a Denial of Service (DoS) by supplying a specially crafted Java class file with methods that grow beyond 64 kilobytes during transformation. When processing this file, an offset truncation…","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvssSource":"vendor","cwe":"CWE-835","vendor":"Red Hat","product":"Red Hat Hardened Images","affected":["hardened_images"],"patched":["hardened_images"],"published":"2026-10-18","updated":"2026-10-20","sourceUpdated":"2026-10-20T23:30:25+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112046.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112046.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-112046"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2554778"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-112046"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112046"},{"url":"https://asm.ow2.io/versions.html"},{"url":"https://gitlab.ow2.org/asm/asm/-/blob/ASM_9_11/asm/src/main/java/org/objectweb/asm/Label.java#L417"},{"url":"https://gitlab.ow2.org/asm/asm/-/commit/4bb1a4701e7b61c2163525b987a96a8db815cb68"},{"url":"https://gitlab.ow2.org/asm/asm/-/merge_requests/480"},{"url":"https://www.vulncheck.com/advisories/ow2-asm-9.11-before-9.11.1-denial-of-service-via-infinite-loop-in-label-resolve"},{"url":"https://access.redhat.com/errata/RHSA-2026:86201"}],"tags":["csaf","vex","red-hat","cve.org"],"epss":0.00119,"epssPercentile":0.01762,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-19T15:35:40.943794Z"},"ingestedAt":"2026-10-18T12:41:54.064Z","slug":"CVE-2026-112046","body":"## Overview\n\nA flaw was found in OW2 ASM. An attacker can cause a Denial of Service (DoS) by supplying a specially crafted Java class file with methods that grow beyond 64 kilobytes during transformation. When processing this file, an offset truncation error triggers an infinite loop within the method resolution logic, causing the application reading or analyzing the class file to hang indefinitely.\n\n## Vendor advisories\n\n- **RHSA-2026:86201** · Red Hat · fixed in: Red Hat Hardened Images · released 2026-10-20 · [advisory](https://access.redhat.com/errata/RHSA-2026:86201)\n\n**org.ow2.asm/asm: OW2 ASM: Denial of Service via infinite loop in Label.resolve()** — rated Moderate by Red Hat. Released 2026-10-18, updated 2026-10-20.\n\nFixed:\n\n- Red Hat Hardened Images\n\n## Remediation\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/ https://access.redhat.com/errata/RHSA-2026:86201","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}