UpHeron
All vulnerabilities

Servers and applications

CVE-2025-27533

Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ. During unmarshalling of OpenWire commands the size value of buffers was not properly validated which could lead to excessive memory allocation and be exploited to cause a denial of service (DoS) by depleting process memory, thereby affecting applications and services that rely on the availability of the ActiveMQ broker…

Severity
Medium 6.9
Published
7 May 2025
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
5.16.8, 5.17.7, 5.18.7, 6.1.6
Sources
NVD

Affected software

SoftwareAffected versions
Apache ActiveMQServers and applications · cpe:a:apache:activemq
  • From 5.16.0 before 5.16.8
  • From 5.17.0 before 5.17.7
  • From 5.18.0 before 5.18.7
  • From 6.0.0 before 6.1.6

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-27533
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-27533