CVE-2026-33582: Apache Answer: Uploading specially crafted TIFF files causes an Out-of-Memory error
Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer.
This issue affects Apache Answer: through 2.0.0.
A crafted TIFF image could trigger excessive memory allocation during image decoding, allowing an authenticated user to cause the server process to crash. Users are recommended to upgrade to version 2.0.1, which fixes the issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Apache Answerto a version that resolves this vulnerability.Fixed in 2.0.1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-33582?
CVE-2026-33582 has a medium severity rating of 6.5 according to the CVSS 3.1 scoring system.
How do I fix CVE-2026-33582?
To fix CVE-2026-33582, users should update to a patched version of Apache Answer that resolves the vulnerability.
What does CVE-2026-33582 affect?
CVE-2026-33582 affects Apache Answer versions up to 2.0.0 and allows for potential server crashes due to crafted TIFF files.
What type of attack is associated with CVE-2026-33582?
CVE-2026-33582 is associated with a malicious file upload vulnerability that can lead to an out-of-memory error.
Who can exploit CVE-2026-33582?
An authenticated user can exploit CVE-2026-33582 by uploading specially crafted TIFF files to the server.