Denial of Service Vulnerability in Apache Fory Affects Remote Applications

CVE-2025-59328

What is CVE-2025-59328?

A vulnerability in Apache Fory allows remote attackers to exploit insecure deserialization of untrusted data, leading to Denial of Service conditions. By submitting a specially crafted data payload, attackers can trigger excessive CPU resource consumption during the deserialization process. This results in the application becoming unresponsive, effectively denying service to legitimate users. It is critical for users of Apache Fory to upgrade to version 0.12.2 or later to ensure the integrity and availability of their applications.

References