Severity
High
Analysis Summary
CVE-2025-27533
Apache ActiveMQ is vulnerable to a denial of service, caused by the failure to properly validate the size value of buffers. By depleting process memory, a remote attacker could exploit this vulnerability leading to excessive memory allocation.
Impact
- Denial of Service
Indicators of Compromise
CVE
CVE-2025-27533
Affected Vendors
Apache
Affected Products
- Apache ActiveMQ - 6.0.0
- Apache ActiveMQ - 5.18.0
- Apache ActiveMQ - 5.17.0
- Apache ActiveMQ - 5.16.0
Remediation
Upgrade to the latest version of Apache ActiveMQ, available from the Apache Security Advisory.