CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCVE-2026-33582
Medium (6.5) in apache answer. EPSS 0.5% chance of exploitation in the next 30 days. Fixed in github.com/apache/incubator-answer 1.7.2-0.20260325113131-cfc3e54f30cc.
Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer.
This issue affects Apache Answer: through 2.0.0.
A crafted TIFF image could trigger excessive memory allocation during image decoding, allowing an authenticated user to cause the server process to crash.
Users are recommended to upgrade to version 2.0.1, which fixes the issue.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
- CWE
- CWE-434
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apache:answer
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-v553-g2w6-295p | Go | github.com/apache/incubator-answer | <1.7.2-0.20260325113131-cfc3e54f30cc | 1.7.2-0.20260325113131-cfc3e54f30cc |
| GO-2026-6153 | Go | github.com/apache/answer | <1.7.2-0.20260325113131-cfc3e54f30cc | 1.7.2-0.20260325113131-cfc3e54f30cc |