PT-2026-121483

CVE-2026-113873

·

Published

2026-10-22

·

Updated

2026-10-22

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
SmileCDR HAPI FHIR does not properly handle highly compressed data, allowing an unauthenticated attacker to send compressed payloads that exhaust server heap or crash certain services when decompressed.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-409: Improper Handling of Highly Compressed Data (Data Amplification)
Related identifiers
CVE-2026-113873
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com