tools.jackson.dataformat:jackson-dataformat-smile vulnerabilities
CVEs whose affected-version data names the tools.jackson.dataformat:jackson-dataformat-smile package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-104895High· 7.5jackson-dataformat-smile: unbounded eager byte[] allocation for raw binary in the async parser allows OutOfMemoryError denial of service
The asynchronous Smile parser (NonBlockingByteArrayParser) uses a raw-binary length prefix taken from untrusted input to allocate a byte[] before the body is read, with no upper bound and no overflow check. On the raw-binary marker 0xFD,…
▾ TwilightFasterXML · com.fasterxml.jackson.dataformat:jackson-dataformat-smilevia CVEORG
CVE-2026-68496High· 7.5PoCThe Smile parser in FasterXML jackson-dataformats-binary never invokes StreamReadConstraints.validateNameLength() when decoding JSON object property names, so the maxNameLength limit is not enforced for this format
The Smile parser in FasterXML jackson-dataformats-binary never invokes StreamReadConstraints.validateNameLength() when decoding JSON object property names, so the maxNameLength limit is not enforced for this format. SmileParser._handleLo…
▾ MidnightFasterXML · com.fasterxml.jackson.dataformat:jackson-dataformat-smileEPSS 0.56%via NVD