{"metadata": {"vulnerability": "cve-2026-110258", "count": 14, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-08-19T00:00:00Z", "date_only": false, "value": "2026-08-19T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "cve-2026-110258", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-13T18:33:55.549Z", "date_only": false, "value": "2026-10-13T18:33:55.549Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-110258", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-14T14:16:31.636Z", "date_only": false, "value": "2026-10-14T14:16:31.636Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-110258", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T14:16:31.636Z", "date_only": false, "value": "2026-10-14T14:16:31.636Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "cve-2026-110258", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T15:17:07Z", "date_only": false, "value": "2026-10-14T15:17:07Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-MX28-XGJX-VQCW", "record": "GHSA-MX28-XGJX-VQCW", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-14T15:17:07.503Z", "date_only": false, "value": "2026-10-14T15:17:07.503", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110258", "record": "FKIE_CVE-2026-110258", "field": "published"}, {"timestamp": "2026-10-14T15:32:22Z", "date_only": false, "value": "2026-10-14T15:32:22Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MX28-XGJX-VQCW", "record": "GHSA-MX28-XGJX-VQCW", "field": "published"}, {"timestamp": "2026-10-14T15:32:22Z", "date_only": false, "value": "2026-10-14T15:32:22Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-MX28-XGJX-VQCW", "record": "GHSA-MX28-XGJX-VQCW", "field": "modified"}, {"timestamp": "2026-10-14T16:10:34.452Z", "date_only": false, "value": "2026-10-14T16:10:34.452535Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-110258", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-14T16:10:34.452Z", "date_only": false, "value": "2026-10-14T16:10:34.452535Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110258", "record": "FKIE_CVE-2026-110258", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-14T16:10:48.019Z", "date_only": false, "value": "2026-10-14T16:10:48.019Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-110258", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T16:10:48.019Z", "date_only": false, "value": "2026-10-14T16:10:48.019Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-110258", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T17:18:25.057Z", "date_only": false, "value": "2026-10-14T17:18:25.057", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110258", "record": "FKIE_CVE-2026-110258", "field": "lastModified"}, {"timestamp": "2026-10-14T19:04:28.371Z", "date_only": false, "value": "2026-10-14T19:04:28.371632Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117440817911856277", "record": "CVE-2026-110258", "field": "creation_timestamp", "uuid": "b0e86a42-30c5-439b-8c06-fb0202adcdec", "content": "CVE-2026-110258 OW2 ASM 3.0 before 9.11 Excessive Memory Allocation via Multiple RET Instructions OW2 ASM 3.0 before 9.11 contains an excessive memory allocation vulnerability in Label.addSubroutineRetSuccessors() that fails to enforce the single-RET-per-JSR rule. Attackers can supply a crafted invalid class file with multiple RET instructions for one JSR, triggering a roughly 2 GB allocation that crashes the JVM.\nhttps://www.cve.org/CVERecord?id=CVE-2026-110258https://gitlab.ow2.org/asm/asm/-/merge_requests/458https://gitlab.ow2.org/asm/asm/-/commit/4dabfe0aef14f8cccb0617640a4add8fbcc4ed36https://gitlab.ow2.org/asm/asm/-/blob/ASM_9_10_1/asm/src/main/java/org/objectweb/asm/Label.java#L568https://asm.ow2.io/versions.htmlhttps://www.vulncheck.com/advisories/ow2-asm-3.0-before-9.11-excessive-memory-allocation-via-multiple-ret-instructions#ow2 #OW2 #ASM#CVE_2026_110258#bot", "url": "https://infosec.exchange/users/cve/statuses/117440817911856277"}]}