6.8
/ 10
MEDIUM
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/SC:N/VI:L/SI:N/VA:H/SA:N
Description
CVE-2026-22187-Bio-Formats-unsafe-Java-deserialization-via-.bfmemo Bio-Formats ≤ 8.3.0 performs unsafe Java deserialization of attacker-controlled .bfmemo cache files during image processing; crafted .bfmemo can trigger deserialization of untrusted...
Basic Information
ID
77C08396-8631-54B6-8066-72D7765488BD
Published
Feb 9, 2026 at 23:39
Modified
Feb 9, 2026 at 23:41