CyberRota Analysis
AI-GeneratedA vulnerability in RESTEasy's IIOImageProvider allows remote, unauthenticated attackers to exploit image request bodies by declaring excessively large dimensions, leading to unbounded memory allocation. This can cause the Java Virtual Machine (JVM) heap to become exhausted, resulting in a denial of service. Organizations using RESTEasy should prioritize patching this issue to mitigate the risk of service disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in RESTEasy's IIOImageProvider, which decodes attacker-supplied image request bodies without enforcing any limit on the declared image dimensions or pixel count. A remote, unauthenticated attacker can send a small crafted image declaring enormous dimensions to trigger a very large memory allocation, exhausting the JVM heap and resulting in a denial of service.