CVE-2026-33582CWE-434

Apache Answer: Uploading specially crafted TIFF files causes an Out-of-Memory error

Medium · published June 9, 2026

CVSS v3.1
6.5
EPSS
1%
Percentile
50.6
In the wild
Unconfirmed
What it is

Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer.

This issue affects Apache Answer: through 2.0.0.

A crafted TIFF image could trigger excessive memory allocation during image decoding, allowing an authenticated user to cause the server process to crash.

Users are recommended to upgrade to version 2.0.1, which fixes the issue.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00653 · 50.6th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2026-06-09T07:34Z
EPSS history
Timeline
  • 09 JUN 07:34Z
    Apache Answer: Uploading specially crafted TIFF files causes an Out-of-Memory error
    cvelistv5