● CVE — Medium
CVE-2021-36374
Vendororacle, apacheProductcommunications order and service management, communications unified inventory management, agile product lifecycle management, primavera unifier, financial services analytical applications infrastructure, communications cloud native core automated test suite, health sciences information manager, primavera gateway, retail back office, retail central office, agile plm, enterprise repository, insurance policy administration, retail advanced inventory planning, agile engineering data management, retail bulk data integration, retail financial integration, ant, communications diameter intelligence hub, communications cloud native core binding support function, banking treasury management, real-time decision server, retail eftlink, banking trade finance, retail extract transform and load, product lifecycle analyticsDiscoveredJul 14, 2021UpdatedAug 25, 2026
When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives are for instance JAR files and many office files. Apache Ant prior to 1.9.16 and 1.10.11 were affected.