Memory Allocation Vulnerability in Apache Lucy by Apache
CVE-2026-61485

Currently unrated

Key Information:

Vendor

Apache
Status
Apache Lucy
Vendor
CVE Published:
5 August 2026

What is CVE-2026-61485?

A vulnerability exists in Apache Lucy where memory allocation can be manipulated with excessive size values. This issue can lead to potential resource exhaustion or denial of service due to unhandled memory requests. As Apache Lucy has been retired, there are no plans for mitigation through updates, prompting users to either restrict access to trusted parties or transition to alternative solutions to safeguard their systems from potential exploits.

Affected Version(s)

Apache Lucy 0

References

https://lists.apache.org/thread/4q9rfscp3tkjr3kt7lsg97szh...
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.