Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Commons BCEL

3 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8

    Apache Commons BCEL prior to 6.6.0 allows producing arbitrary bytecode via out-of-bounds writing

    Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pa…