Memory Allocation Vulnerability in Apache ActiveMQ by Apache

CVE-2025-27533

Summary

A vulnerability in Apache ActiveMQ allows excessive memory allocation during the unmarshalling of OpenWire commands due to improper validation of buffer size values. This may lead to a denial of service (DoS), depleting process memory and affecting application and service availability dependent on the ActiveMQ broker, especially in environments not implementing mutual TLS connections. Users are advised to upgrade to the specified versions for remediation and consider enabling mutual TLS as a mitigation strategy.

References