Copyright © 2012 Red Hat, Inc. All rights reserved.
Important
2026-09-23T02:06:10
com.fasterxml.jackson.core/jackson-core: Jackson-core: Denial of Service via unbounded StringBuilder growth during malformed token processing
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1050
UTF8DataInputJsonParser._reportInvalidToken() in FasterXML jackson-core builds the offending-token text for its error message by appending Java identifier characters to a StringBuilder in a loop that has no upper bound. Unlike the three sibling parser implementations, including UTF8StreamJsonParser, it never consults ErrorReportConfiguration.getMaxErrorTokenLength() (default 256). A malformed token supplied to a parser created through JsonFactory.createParser(DataInput) is therefore accumulated in full. No StreamReadConstraints setting mitigates this: maxDocumentLength cannot be applied to DataInput sources at all, and maxStringLength does not cover this path because the accumulation bypasses ReadConstrainedTextBuffer. The reporter measured a 20,000,109-character exception message from a 20-million-character malformed token on the DataInput path, against 367 characters for identical input on the InputStream path. Scaling the payload drives the StringBuilder, which also incurs byte-to-char expansion and internal array doubling, to many times the raw payload size and can trigger OutOfMemoryError for the whole JVM. UTF8DataInputJsonParser was introduced in 2.8.0 together with createParser(DataInput); releases before 2.8.0 do not contain the affected class.
A flaw was found in FasterXML jackson-core. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing a specially crafted, malformed token to the JsonFactory.createParser(DataInput) method. The UTF8DataInputJsonParser component, responsible for handling DataInput sources, does not properly limit the size of the error message generated for invalid tokens. This unbounded growth of the StringBuilder can consume excessive memory, leading to an OutOfMemoryError and crashing the Java Virtual Machine (JVM).
A denial of service flaw exists in FasterXML jackson-core where processing malformed JSON tokens from a DataInput source can lead to unbounded memory allocation. This vulnerability can exhaust system resources, causing a Java Virtual Machine (JVM) crash and impacting the availability of services that utilize the affected JsonFactory.createParser(DataInput) method with untrusted input.
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Exploit Intelligence
Under investigation
exploit-intelligence/agent-client-rhel9
OpenShift Developer Tools and Services
Under investigation
jenkins
OpenShift Developer Tools and Services
Affected
jenkins-2-plugins
OpenShift Developer Tools and Services
Under investigation
ocp-tools-4/jenkins-rhel8
OpenShift Developer Tools and Services
Under investigation
ocp-tools-4/jenkins-rhel9
OpenShift Serverless
Under investigation
openshift-serverless-1/kn-ekb-dispatcher-rhel9
OpenShift Serverless
Under investigation
openshift-serverless-1/kn-ekb-receiver-rhel9
OpenShift Serverless
Under investigation
openshift-serverless-1/kn-eventing-integrations-aws-ddb-streams-source-rhel9
OpenShift Serverless
Under investigation
openshift-serverless-1/kn-eventing-integrations-aws-s3-sink-rhel9
OpenShift Serverless
Under investigation
openshift-serverless-1/kn-eventing-integrations-aws-s3-source-rhel9
OpenShift Serverless
Under investigation
openshift-serverless-1/kn-eventing-integrations-aws-sns-sink-rhel9
OpenShift Serverless
Under investigation
openshift-serverless-1/kn-eventing-integrations-aws-sqs-sink-rhel9
OpenShift Serverless
Under investigation
openshift-serverless-1/kn-eventing-integrations-aws-sqs-source-rhel9
OpenShift Serverless
Under investigation
openshift-serverless-1/kn-eventing-integrations-log-sink-rhel9
OpenShift Serverless
Under investigation
openshift-serverless-1/kn-eventing-integrations-timer-source-rhel9
Red Hat AI Inference Server
Affected
rhaiis/vllm-cuda-rhel9
Red Hat AI Inference Server
Affected
rhaii/vllm-gaudi-rhel9
Red Hat AMQ Broker 7
Under investigation
jackson-core
Red Hat Ansible Automation Platform 2
Not affected
ansible-automation-platform-24/de-minimal-rhel8
Red Hat Ansible Automation Platform 2
Not affected
ansible-automation-platform-24/de-minimal-rhel9
Red Hat Ansible Automation Platform 2
Not affected
ansible-automation-platform-25/de-minimal-rhel8
Red Hat Ansible Automation Platform 2
Not affected
ansible-automation-platform-25/de-minimal-rhel9
Red Hat Ansible Automation Platform 2
Not affected
ansible-automation-platform-26/de-minimal-rhel9
Red Hat Ansible Automation Platform 2
Not affected
ansible-automation-platform-27/de-minimal-rhel9
Red Hat Ansible Automation Platform 2
Not affected
ansible-automation-platform-27/de-supported-rhel9
Red Hat Ansible Automation Platform 2
Affected
python3.11-drools-jpy-jar
Red Hat Ansible Automation Platform 2
Affected
python3.12-drools-jpy-jar
Red Hat Ansible Automation Platform 2
Affected
python3x-drools-jpy-jar
Red Hat Ansible Automation Platform 2
Affected
python-drools-jpy-jar
Red Hat build of Apache Camel 4 for Quarkus 3
Under investigation
jackson-core
Red Hat build of Apache Camel for Spring Boot 4
Affected
jackson-core
Red Hat build of Apache Camel - HawtIO 4
Under investigation
jackson-core
Red Hat build of Apicurio Registry 3
Under investigation
jackson-core
Red Hat build of Debezium 3
Under investigation
jackson-core
Red Hat Build of Keycloak
Under investigation
jackson-core
Red Hat Build of Keycloak
Under investigation
keycloak/rhbk-openshift-rhel9
Red Hat Build of Keycloak
Under investigation
keycloak/rhbk-rhel9-operator
Red Hat Build of Keycloak
Under investigation
rhbk/keycloak-rhel9
Red Hat Build of Keycloak
Under investigation
rhbk/keycloak-rhel9-operator
Red Hat build of Quarkus
Under investigation
jackson-core
Red Hat Ceph Storage 8
Affected
liborc
Red Hat Ceph Storage 9
Under investigation
libarrow
Red Hat Ceph Storage 9
Affected
liborc
Red Hat Certificate System 10
Affected
redhat-pki:10/redhat-pki
Red Hat Certificate System 11
Under investigation
redhat-pki
Red Hat Data Grid 8
Under investigation
jackson-core
Red Hat Enterprise Linux 10
Not affected
dogtag-pki
Red Hat Enterprise Linux 8
Affected
pki-core:10.6/pki-core
Red Hat Enterprise Linux 8
Not affected
protobuf
Red Hat Enterprise Linux 9
Not affected
jackson-core
Red Hat Enterprise Linux 9
Affected
pki-core
Red Hat Enterprise Linux 9
Not affected
protobuf
Red Hat Enterprise Linux AI (RHEL AI) 3
Under investigation
rhelai3/bootc-gaudi-rhel9
Red Hat Fuse 7
Affected
jackson-core
Red Hat Hardened Images
Not affected
maven3.9
Red Hat JBoss Enterprise Application Platform 7
Will not fix
jackson-core
Red Hat JBoss Enterprise Application Platform 7
Will not fix
jboss-eap-7/eap74-els-openjdk11-openshift-rhel8
Red Hat JBoss Enterprise Application Platform 7
Under investigation
jboss-eap-7/eap74-els-openjdk17-openshift-rhel8
Red Hat JBoss Enterprise Application Platform 7
Will not fix
jboss-eap-7/eap74-els-openjdk8-openshift-rhel8
Red Hat JBoss Enterprise Application Platform 8
Under investigation
jackson-core
Red Hat JBoss Enterprise Application Platform Expansion Pack
Under investigation
jackson-core
Red Hat JBoss Web Server 7
Under investigation
jboss-webserver-7/jws70-openjdk17-openshift-rhel9
Red Hat JBoss Web Server 7
Under investigation
jboss-webserver-7/jws70-openjdk17-rhel9-openshift
Red Hat JBoss Web Server 7
Under investigation
jboss-webserver-7/jws70-openjdk21-openshift-rhel9
Red Hat JBoss Web Server 7
Under investigation
jboss-webserver-7/jws70-openjdk21-rhel9-openshift
Red Hat Lightspeed for Runtimes Operator
Under investigation
rh-lightspeed-runtimes/runtimes-agent-init-rhel9
Red Hat Offline Knowledge Portal
Under investigation
offline-knowledge-portal/rhokp-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhai-early-access/docling-serve-cuda-rhel9
Red Hat OpenShift AI (RHOAI)
Under investigation
rhoai/odh-modelmesh-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Under investigation
rhoai/odh-spark-operator-rhel9
Red Hat OpenShift AI (RHOAI)
Under investigation
rhoai/odh-th06-cpu-torch210-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Under investigation
rhoai/odh-th06-cpu-torch291-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Under investigation
rhoai/odh-th06-cuda130-torch210-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Under investigation
rhoai/odh-th06-cuda130-torch291-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Under investigation
rhoai/odh-th06-rocm64-torch291-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Under investigation
rhoai/odh-th-torch-cpu-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Under investigation
rhoai/odh-th-torch-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-trustyai-service-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-vllm-gaudi-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9
Red Hat OpenShift Dev Spaces
Under investigation
devspaces/multicluster-redirector-rhel9
Red Hat OpenShift Dev Spaces
Under investigation
devspaces/openvsx-rhel9
Red Hat OpenShift Dev Spaces
Under investigation
devspaces/pluginregistry-rhel9
Red Hat OpenShift Dev Spaces
Under investigation
devspaces/server-rhel9
Red Hat OpenStack Platform 13 (Queens)
Under investigation
opendaylight
Red Hat OpenStack Platform 16.2
Under investigation
protobuf
Red Hat Satellite 6
Under investigation
candlepin
Red Hat Satellite 6
Under investigation
openvox-server
Red Hat Satellite 6
Affected
puppetserver
Red Hat Single Sign-On 7
Affected
jackson-core
https://www.cve.org/CVERecord?id=CVE-2026-89425
https://nvd.nist.gov/vuln/detail/CVE-2026-89425
https://github.com/FasterXML/jackson-core/pull/1698
https://github.com/FasterXML/jackson-core/security/advisories/GHSA-7hhh-6rmp-j9qf