What’s Vulnerable › Products

OW2 ASM vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your OW2 ASM version is affected

Latest OW2 ASM vulnerabilities

• CVE-2026-112046 — OW2 ASM 9.11 before 9.11.1 Denial of Service via Infinite Loop in Label.resolve() (CVSS 5.5)
• CVE-2026-110591 — OW2 ASM 1.4.3 before 9.11 Excessive Resource Consumption via Analyzer (CVSS 5.5)
• CVE-2026-110270 — OW2 ASM 3.0 before 9.11 Exponential Memory Allocation in JSRInlinerAdapter (CVSS 5.5)
• CVE-2026-110263 — OW2 ASM 3.0 before 9.11 Uncontrolled Recursion in SignatureReader (CVSS 5.5)
• CVE-2026-110262 — OW2 ASM 3.1 before 9.11 Excessive Memory Allocation in AdviceAdapter (CVSS 3.3)
• CVE-2026-110261 — OW2 ASM 3.0 before 9.11 Excessive CPU Consumption via ClassWriter COMPUTE_FRAMES (CVSS 5.5)
• CVE-2026-110260 — OW2 ASM 3.0 before 9.11 Quadratic Memory Allocation via Exception Handlers (CVSS 5.5)
• CVE-2026-110259 — OW2 ASM 3.0 before 9.11 Uncontrolled Recursion via ClassWriter.replaceAsmInstructions() (CVSS 5.5)
• CVE-2026-110258 — OW2 ASM 3.0 before 9.11 Excessive Memory Allocation via Multiple RET Instructions (CVSS 5.5)
• CVE-2026-110257 — OW2 ASM 5.0 before 9.11 Excessive Memory Allocation via BootstrapMethods Attribute (CVSS 5.5)