CLEANSTART-2026-UE53829: asynchronous Smile parser (NonBlockingByteArrayParser) uses a raw-binary length prefix taken from untrusted input to allocate a byte[] before the body is read, with no upper bound and no overflow c...
Security vulnerability affects the solr package. The asynchronous Smile parser (NonBlockingByteArrayParser) uses a raw-binary length prefix taken from untrusted input to allocate a byte[] before the body is read, with no upper bound and no overflow check.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/solrto a version that resolves this vulnerability.Fixed in 9.11.0-r0
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The issue is network-reachable, requires low attack complexity, and does not require privileges or user interaction.
What is the likely security impact?
The reported impact is limited to availability. An attacker may cause a denial of service through uncontrolled memory allocation; no confidentiality or integrity impact is indicated.
Which deployments are exposed?
Deployments are exposed when the affected asynchronous Smile parser processes attacker-controlled raw-binary input. The provided data does not identify affected versions or whether this parser is enabled by default.