CVE-2025-1634 HIGH

CVE-2025-1634: Io.quarkus:quarkus-resteasy: memory leak in quarkus resteasy classic when client requests timeout

Vendor Red Hat
Product Red Hat Build of Apache Camel 4.8 for Quarkus 3.15
Weakness CWE-401
Published February 26, 2025
Last update May 6, 2026
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError.

Key dates

02Disclosure timeline

February 26, 2025 CVE published
May 6, 2026 Record updated