Commons Bcel

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:apache:commons_bcel:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductCommons Bcel (6300e41d-3c41-54fb-83ab-ce987e961387)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:apache/commons purl2cpe 2026-06-01 10:14:33.123933
pkg:deb/debian/bcel purl2cpe 2026-06-01 10:14:33.123936
pkg:deb/ubuntu/bcel purl2cpe 2026-06-01 10:14:33.123939
pkg:github/apache/commons-bcel purl2cpe 2026-06-01 10:14:33.123942
pkg:github/nikosnikotest/commons-bcel purl2cpe 2026-06-01 10:14:33.123945
pkg:maven/org.apache.bcel/bcel purl2cpe 2026-06-01 10:14:33.123948
pkg:rpm/centos/bcel purl2cpe 2026-06-01 10:14:33.123950
pkg:rpm/fedora/bcel purl2cpe 2026-06-01 10:14:33.123953
pkg:rpm/opensuse/bcel purl2cpe 2026-06-01 10:14:33.123956

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-42920 vulnerable 2026-06-08 05:49:30.757172 Apache Commons BCEL prior to 6.6.0 allows producing arbitrary bytecode via out-of-bounds writing
Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those APIs, giving the attacker more control over the resulting bytecode than otherwise expected. Update to Apache Commons BCEL 6.6.0.
Published: 2022-11-07T00:00:00.000Z
Updated: 2024-08-03T13:19:05.457Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.