MEDIUMCVSS v3.1 5.9Vulnerability

CVE-2026-118488

In Eclipse Vert.x versions [4.0.0, 4.5.35] or [5.0.0, 5.2.2], when a malicious server keeps sending bytes on an EOL-terminated line (not length-prefixed, for example a simple string [1]), we'll keep growing the buffer without bounds, eventually leading to an OOM. We need to have a configurable limit for EOL-terminated lines. If a malicious server sends a specially crafted RESP response (for example a bulk string [2] with missing CRLF trailer), the parser enters an infinite loop where it keeps parsing the same buffer and pushing the same response to the caller, which may lead e.g. to an OOM if the consumer just buffers the responses. We must fix the parser to avoid this infinite looping.

Properties

Severity
MEDIUM
Nvd fetched at
2026-11-03T17:20:13.885968+00:00
Cvss score
5.9
Cvss severity
MEDIUM
Retrieved at
2026-11-03T17:21:18+00:00
Score
5.9
Last source
NVD
Cvss version
3.1
Cve id
CVE-2026-118488
Cvss vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
First seen by Signal
2026-11-03T17:21:18+00:00
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Published at
2026-11-03T15:17:24.647
Last modified
2026-11-03T16:13:23.003

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-118488 (CVSS v3.1 5.9) — Ninja Signal Threat Intelligence | Ninja Signal