Skip to content
OpenAdvisories

Product · Open Microscopy Environment

Bio-Formats

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2026-22187 Public exploit

    Bio-Formats <= 8.3.0 Memoizer Unsafe Deserialization via .bfmemo Cache Files

    Bio-Formats versions up to and including 8.3.0 perform unsafe Java deserialization of attacker-controlled memoization cache files (.bfmemo) during image processing. The loci.formats.Memoizer class automatically loads and deserializes memo files associated wit…