Medium severity6.5NVD Advisory· Published Jun 9, 2026· Updated Jun 10, 2026

CVE-2026-33582

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer.

This issue affects Apache Answer: through 2.0.0.

A crafted TIFF image could trigger excessive memory allocation during image decoding, allowing an authenticated user to cause the server process to crash. Users are recommended to upgrade to version 2.0.1, which fixes the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apache/Answer2 versions
cpe:2.3:a:apache:answer:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:apache:answer:*:*:*:*:*:*:*:*range: <2.0.1
- (no CPE)range: <=2.0.0

Patches

Vulnerability mechanics

References

www.openwall.com/lists/oss-security/2026/06/09/5nvdMailing ListThird Party Advisory
lists.apache.org/thread/3sgpx4cwsgpnt66xv3cqvtc8z4st1kbqnvdMailing ListVendor Advisory

News mentions

Apache HTTP Server and Answer: 22 Vulnerabilities Disclosed, Including Critical Flaws
Vypr Intelligence · Jun 10, 2026

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000