{"data":{"id":"8fd60f3a-3973-4a66-a7ec-8ba92a071b09","title":"CVE-2026-42440: OOM Denial of Service via Unbounded Array Allocation in Apache OpenNLP AbstractModelReader Versions Affected: before…","summary":"CVE-2026-42440 is an out-of-memory denial-of-service flaw in Apache OpenNLP's AbstractModelReader, affecting versions before 2.5.9 and before 3.0.0-M3. The methods getOutcomes(), getOutcomePatterns() and getPredicates() allocate arrays using an unvalidated 32-bit count read from a binary model stream. A crafted .bin model file can set that count to Integer.MAX_VALUE, causing an OutOfMemoryError before the label or pattern data is read, so a single small file can crash any JVM that loads it.","solution":"2.x users should upgrade to 2.5.9. 3.x users should upgrade to 3.0.0-M3. Users who cannot upgrade immediately should treat all .bin model files as untrusted input unless their provenance is verified, and avoid loading models supplied by end users or fetched from third-party repositories without integrity checks.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-42440","publishedAt":"2026-05-04T17:16:26.147Z","cveId":"CVE-2026-42440","cweIds":["CWE-789"],"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":["org.apache.opennlp:opennlp-tools@< 2.5.9 (fixed: 2.5.9)","org.apache.opennlp:opennlp-tools@>= 3.0.0-M1, < 3.0.0-M3 (fixed: 3.0.0-M3)"],"affectedPackageNames":["org-apache-opennlp:opennlp-tools"],"affectedPackageRefs":["maven:org-apache-opennlp:opennlp-tools"],"affectedVendors":[],"affectedVendorsRaw":["Apache OpenNLP"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Apache OpenNLP AbstractModelReader out-of-memory via unbounded array allocation","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00603,"epssCheckedAt":"2026-11-09T18:09:53.046Z","kevDateAdded":null,"advisoryAliases":["GHSA-659w-93r5-9j6m"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:48:54.559Z","patchAvailable":true,"disclosureDate":"2026-05-04T17:16:26.147Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":"2026-11-06T00:07:50.570Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["availability"],"aiComponentTargeted":"inference","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":null,"name":"org.apache.opennlp:opennlp-tools","fixedVersion":"3.0.0-M3","matchedVersion":null,"fixReleasedAt":null,"daysToFix":null,"match":null,"source":null,"status":"ecosystem_unknown","checkedAt":"2026-11-06T00:07:50.535Z"},{"ecosystem":null,"name":"org.apache.opennlp:opennlp-tools","fixedVersion":"2.5.9","matchedVersion":null,"fixReleasedAt":null,"daysToFix":null,"match":null,"source":null,"status":"ecosystem_unknown","checkedAt":"2026-11-06T00:07:50.535Z"}]}}