VYPR
Moderate severityNVD Advisory· Published Feb 19, 2024· Updated Nov 4, 2025

Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file

CVE-2024-25710

Description

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0.

Users are recommended to upgrade to version 1.26.0 which fixes the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
org.apache.commons:commons-compressMaven
>= 1.3, < 1.26.01.26.0

Affected products

547

Patches

Vulnerability mechanics

References

7

News mentions

0

No linked articles in our index yet.