Integer Overflow in Jackson Data Formats Binary Affects Java Applications

CVE-2026-110747

What is CVE-2026-110747?

A vulnerability exists within the ProtobufParser._readStringKey() method that improperly handles the length prefix of protobuf map entries. An attacker can craft a malformed message with a high key length, leading to an integer overflow during the check that verifies if the sum of the pointer and length stays within bounds. This oversight allows the check to pass erroneously when the input actually lacks valid key data. Consequently, when the parser attempts to handle this invalid input, it can trigger an OutOfMemoryError due to excessive memory allocation requests. The vulnerability is not mitigated by existing configurations like StreamReadConstraints. Affected releases include specific versions on the 3.x line, highlighting the need for immediate scrutiny and remedial actions by developers using these specific versions.

References