Skip to content
NewA calmer, faster ZeroHour
Vulnerabilitylow

CVE-2026-67211: Apache OpenNLP: OOM DoS via Unbounded Array Allocation in SymSpellModelSerializer

oss-security ()2
Read at seclists.org
Part of a story covered by 2 sourcesApache OpenNLP discloses two denial-of-service vulnerabilities (CVE-2026-67211, CVE-2026-82617), both fixed in 3.0.0-M6Merged summary & timeline
AI summary · glm-5.3-flashSummaries by Vani AI

Apache OpenNLP CVE-2026-67211: unbounded map pre-sizing in SymSpellModelSerializer enables out-of-memory denial of service in opennlp-symspell 3.0.0-M4/M5.

CVE-2026-67211 affects the opennlp-symspell artifact in versions 3.0.0-M4 and 3.0.0-M5 only. The SymSpellModelSerializer.create() method performs unbounded map pre-sizing, allowing crafted input to trigger out-of-memory denial of service. Releases 1.x and 2.x are unaffected because the spellcheck extension was introduced in 3.0.0-M4; the issue is resolved in 3.0.0-M6.

Key facts
  • Affects opennlp-symspell 3.0.0-M4 and 3.0.0-M5 only
  • Unbounded map pre-sizing in SymSpellModelSerializer.create() causes OOM
  • 1.x and 2.x releases unaffected; fixed in 3.0.0-M6
Analyze CVE-2026-67211 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2026-67211
Tags
apachedenial-of-servicejavaopennlpout-of-memorysymspell
Vendors
ApacheApache OpenNLP
Products
Apache OpenNLP
Organizations
Apache Software Foundation

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-67211
OOM Denial of Service in Apache OpenNLP opennlp-spellcheck 3.0.0-M4/M5
7.5—

From the original article

Posted by Richard Zowalla on Sep 11 Severity: moderate Affected versions: - Apache OpenNLP (org. apache. opennlp:opennlp-symspell) 3.

oss-security

seclists.org

Read the full article at oss-security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.