CVE-2026-101021

MultipartInputStream performs inefficient boundary matching and unnecessary buffer copying. Crafted multipart input can force excessive boundary comparisons and repeated copying.

Score

CVSS 4.0 8.7 High

Status

Deferred - ics-cert@hq.dhs.gov

Published

2026-10-16

Last modified

2026-10-16

Weaknesses

CWE-407

Affected products

• Dcm4chee-arc-light (J4care)

References

• https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-288-02
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-288-02.json