> CVE-2026-61485

« BACK_TO_HOME
PUBLISHED
2026-08-05 08:16
MODIFIED
2026-08-05 08:16
EPSS (Prob. Exploit)
0.62%
Top 52.8%
DATA SOURCES:
NVD 🔗 2026-08-05 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-10-25

> DESCRIPTION

** UNSUPPORTED WHEN ASSIGNED ** Memory Allocation with Excessive Size Value vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-789

> CWE DETAILED DESCRIPTIONS

CWE-789: Memory Allocation with Excessive Size Value - The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.

> HISTORIQUE DES MODIFICATIONS

Première apparition
05/08/2026 08:16
Source: NVD
📊 ENRICHISSEMENT 01/09/2026 06:02
CWE
Champ modifié: Description CWE
Ancienne valeur:
N/A
Nouvelle valeur:
CWE-789: Memory Allocation with Excessive Size Value - The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing ar...
Total des modifications: 1 Dernière mise à jour: 2 months ago

> REFERENCES

https://lists.apache.org/thread/4q9rfscp3tkjr3kt7lsg97szhmydl23s
« BACK_TO_HOME