CVE-2026-0049

MediumCVSS 6.2

Published: 06/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.10%

1th percentile - higher than 1% of all known CVEs

Summary

Vulnerability in onHeaderDecoded of LocalImageResolver.java leading to persistent denial of service due to resource exhaustion. Local attack requires no additional privileges or user interaction.

Risk Assessment

An attacker can cause persistent resource exhaustion, preventing the application or system from functioning.

Recommendation

Apply the vendor patch that limits resource allocation in LocalImageResolver.

Original NVD description (English source)

In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.