{"id":"CVE-2026-85532","published":"2026-09-30T12:17:13.933","lastModified":"2026-10-02T20:14:49.163","description":"Apache WSS4J accepted attacker-controlled derived-key lengths and offsets without adequate bounds. This could permit cryptographically weak keys or excessive CPU and memory consumption when processing crafted WS-Security messages. The fixes enforce a minimum key length of 16 bytes, a maximum length of 512 bytes, and a maximum offset of 4096 bytes.\nUsers are recommended to upgrade to versions 4.0.2 or 3.0.6 or 2.4.4, which fix this issue.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwes":["CWE-20"],"vendors":["apache"],"products":["wss4j"],"references":[{"url":"https://lists.apache.org/thread.html/7jllcpbf4nbzhdp2vchz5yplnl5w6vd6","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2026/09/30/8","tags":["Mailing List","Third Party Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Apache WSS4J accepts attacker-controlled derived-key lengths and offsets without proper bounds checking, potentially leading to weak cryptographic keys or excessive resource consumption when processing crafted WS-Security messages.","exploitability":"Exploitation requires sending a specially crafted WS-Security message with malicious key parameters, but no preconditions are specified beyond the ability to send such messages.","blast_radius":"If exploited, this vulnerability could cause high CPU and memory usage across affected systems, potentially leading to denial of service or degraded performance for legitimate users.","remediation":"Upgrade to Apache WSS4J version 4.0.2, 3.0.6, or 2.4.4 which contain the necessary fixes.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["ws-security","denial-of-service","crypto","xml"],"model":"garnet-coder","analyzedAt":"2026-10-17T09:05:56.853Z"}}