{"id":"CVE-2026-24819","aliases":["EUVD-2026-4799","GHSA-444m-px7r-qpvv"],"status":"published","title":"An out-of-memory (OOM) issue in foxinmy/weixin4j","description":"Improperly Controlled Sequential Memory Allocation vulnerability in foxinmy weixin4j (weixin4j-base/src/main/java/com/foxinmy/weixin4j/util modules). This vulnerability is associated with program files CharArrayBuffer.Java, ClassUtil.Java.\n\nThis issue affects weixin4j.","severity":{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/AU:Y/R:A/V:D/RE:M/U:Amber","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00439,"percentile":0.38581,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-1325"],"published":"2026-01-27T08:55:54Z","modified":"2026-06-17T10:23:38Z","affected":[{"source":"ghsa","ecosystem":"Maven","package":"com.foxinmy:weixin4j-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.10.2"}]}]},{"source":"osv","ecosystem":"Maven","package":"com.foxinmy:weixin4j-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.10.2"}]}],"versions":["1.0","1.1","1.10.0","1.10.1","1.10.2","1.2","1.3","1.4","1.5.0","1.5.1","1.5.2","1.5.3","1.6.0","1.6.1","1.6.2","1.6.3","1.6.4","1.6.5","1.6.6","1.6.7","1.6.8","1.6.9","1.7.0","1.7.1","1.7.2","1.7.3","1.7.4","1.7.5","1.7.6","1.7.7","1.7.8","1.7.9","1.8.0","1.8.1","1.8.2","1.9.0","1.9.1"]}],"products":[{"vendor":"foxinmy","product":"weixin4j"}],"references":[{"url":"https://github.com/foxinmy/weixin4j/pull/229","tags":["patch","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-24819","tags":["advisory"]},{"url":"https://github.com/foxinmy/weixin4j/commit/d1c825835802cd3a0c04772be1220ff4476ea27c","tags":["web"]},{"url":"https://github.com/advisories/GHSA-444m-px7r-qpvv"},{"url":"https://github.com/foxinmy/weixin4j","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2026-24819","title":"An out-of-memory (OOM) issue in foxinmy/weixin4j","description":"Improperly Controlled Sequential Memory Allocation vulnerability in foxinmy weixin4j (weixin4j-base/src/main/java/com/foxinmy/weixin4j/util modules). This vulnerability is associated with program files CharArrayBuffer.Java, ClassUtil.Java.\n\nThis issue affects weixin4j.","status":"published","published":"2026-01-27T08:55:54.605Z","modified":"2026-01-27T17:01:38.527Z","cvss":[{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/AU:Y/R:A/V:D/RE:M/U:Amber","level":"medium","assessor":"cna"}],"cwes":["CWE-1325"],"updated_at":"2026-11-02T14:19:50.575061Z"}],"euvd":[{"id":"EUVD-2026-4799","description":"Improperly Controlled Sequential Memory Allocation vulnerability in foxinmy weixin4j (weixin4j-base/src/main/java/com/foxinmy/weixin4j/util modules). This vulnerability is associated with program files CharArrayBuffer.Java, ClassUtil.Java.\n\nThis issue affects weixin4j.","status":"published","published":"2026-01-27T08:55:54Z","modified":"2026-01-27T17:01:38Z","cvss":[{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/AU:Y/R:A/V:D/RE:M/U:Amber","level":"medium"}],"updated_at":"2026-11-02T19:48:47.293439Z"}],"ghsa":[{"id":"GHSA-444m-px7r-qpvv","title":"weixin4j has Improperly Controlled Sequential Memory Allocation ","description":"Improperly Controlled Sequential Memory Allocation vulnerability in foxinmy weixin4j (weixin4j-base/src/main/java/com/foxinmy/weixin4j/util modules). This vulnerability is associated with program files CharArrayBuffer.Java, ClassUtil.Java.\n\nThis issue affects all versions of weixin4j. A path is available:  [d1c8258](https://github.com/foxinmy/weixin4j/commit/4b7ad14df6567064b468b4c9cb7a8bfeff48c8bd)","status":"published","published":"2026-01-27T09:30:30Z","modified":"2026-01-28T16:01:17Z","cvss":[{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/AU:Y/R:A/V:D/RE:M/U:Amber","level":"medium"}],"cwes":["CWE-1325"],"updated_at":"2026-11-02T14:39:20.563096Z"}],"nvd":[{"id":"CVE-2026-24819","description":"Improperly Controlled Sequential Memory Allocation vulnerability in foxinmy weixin4j (weixin4j-base/src/main/java/com/foxinmy/weixin4j/util modules). This vulnerability is associated with program files CharArrayBuffer.Java, ClassUtil.Java.\n\nThis issue affects weixin4j.","status":"published","published":"2026-01-27T09:15:52.52Z","modified":"2026-06-17T10:23:38.857Z","cvss":[{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:D/RE:M/U:Amber","level":"medium","assessor":"secondary"}],"cwes":["CWE-1325"],"updated_at":"2026-11-02T14:12:04.769088Z"}],"osv":[{"id":"GHSA-444m-px7r-qpvv","title":"weixin4j has Improperly Controlled Sequential Memory Allocation ","description":"Improperly Controlled Sequential Memory Allocation vulnerability in foxinmy weixin4j (weixin4j-base/src/main/java/com/foxinmy/weixin4j/util modules). This vulnerability is associated with program files CharArrayBuffer.Java, ClassUtil.Java.\n\nThis issue affects all versions of weixin4j. A path is available:  [d1c8258](https://github.com/foxinmy/weixin4j/commit/4b7ad14df6567064b468b4c9cb7a8bfeff48c8bd)","status":"published","published":"2026-01-27T09:30:30Z","modified":"2026-02-03T03:06:55.897799Z","cvss":[{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/AU:Y/R:A/V:D/RE:M/U:Amber","level":"medium"}],"cwes":["CWE-1325"],"updated_at":"2026-11-02T15:46:36.434231Z"}]}}