github.com
https://github.com/foxinmy/weixin4j CVE-2026-24819
MEDIUM
An out-of-memory (OOM) issue in foxinmy/weixin4j
Record summary
CVE-2026-24819 has a selected CVSS score of 6.3 (medium).
Description
Improperly Controlled Sequential Memory Allocation vulnerability in foxinmy weixin4j (weixin4j-base/src/main/java/com/foxinmy/weixin4j/util modules). This vulnerability is associated with program files CharArrayBuffer.Java, ClassUtil.Java. This issue affects weixin4j.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 27, 2026 · Source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
weixin4jBrowse foxinmy / weixin4jDefault status: affected | CVE List | Version range not supplied | unknown |
com.foxinmy:weixin4j-baseBrowse Maven / com.foxinmy:weixin4j-base | GitHub Advisory | Through 1.10.2 | affected |
References
4github.com
https://github.com/foxinmy/weixin4j/commit/d1c825835802cd3a0c04772be1220ff4476ea27c github.compatch
https://github.com/foxinmy/weixin4j/pull/229 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2026-24819