GitHub Advisoryadvisory · Maven

GHSA-444m-px7r-qpvv weixin4j has Improperly Controlled Sequential Memory Allocation

MEDIUM Published 2026-01-27 Modified 2026-01-28 Official page ↗
Aliases
CVE-2026-24819
Ecosystem
Maven
Packages
com.foxinmy:weixin4j-base
Severity
Moderate
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/AU:Y/R:A/V:D/RE:M/U:Amber
Weaknesses
CWE-1325
Reviewed
2026-01-28

Affected packages

• Maven com.foxinmy:weixin4j-base: <= 1.10.2 (no fix yet)

Description

Improperly Controlled Sequential Memory Allocation vulnerability in foxinmy weixin4j (weixin4j-base/src/main/java/com/foxinmy/weixin4j/util modules). This vulnerability is associated with program files CharArrayBuffer.Java, ClassUtil.Java. This issue affects all versions of weixin4j. A path is available: d1c8258

Related

Alias · CVE (1)

  • CVE-2026-24819 Improperly Controlled Sequential Memory Allocation vulnerability in foxinmy weixin4j (weixin4j-base/src/main/java/com/foxinmy/weixin4j/util… vulnerability

Weakness · CWE (1)

  • CWE-1325 Improperly Controlled Sequential Memory Allocation weakness

References