PT-2026-67958 · Apache · Qpid Protonj2

·

CVE-2026-67589

·

Published

2026-08-05

·

Updated

2026-08-07

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Apache Qpid ProtonJ2 versions prior to 1.2.0
Description A pre-authentication attacker can exploit the way type size and count are handled to trigger excessive memory allocation, which may result in a denial of service.
Recommendations Upgrade to version 1.2.0.

Exploit

Fix

DoS

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-67589

Affected Products

Qpid Protonj2