CVE-2024-6875: Infinispan Potential Out of Memory Error via REST Compare API Buffer API

March 28, 2025 (updated July 21, 2026)

A vulnerability was found in the Infinispan component in Red Hat Data Grid. The REST compare API may have a buffer leak and an out of memory error can occur when sending continual requests with large POST data to the REST API.

References

access.redhat.com/security/cve/CVE-2024-6875
bugzilla.redhat.com/show_bug.cgi?id=2298555
github.com/advisories/GHSA-2q39-w2hw-2pjm
github.com/infinispan/infinispan/pull/12645
github.com/infinispan/infinispan/pull/12663
issues.redhat.com/browse/JDG-7169
nvd.nist.gov/vuln/detail/CVE-2024-6875

Code Behaviors & Features

Detect and mitigate CVE-2024-6875 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →