CVE-2026-82604
Received Received - Intake

Stack Overflow in BareBones BBEdit Java Language Module

Publication date: 2026-08-31

Last updated on: 2026-08-31

Assigner: VulDB

Description
A flaw has been found in BareBones BBEdit up to 15.5.5. Impacted is an unknown function of the component Java Language Module. This manipulation causes uncontrolled recursion. Remote exploitation of the attack is possible. Upgrading to version 16.0 is recommended to address this issue. You should upgrade the affected component.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-31
Last Modified
2026-08-31
Generated
2026-08-31
AI Q&A
2026-08-31
EPSS Evaluated
N/A
NVD
CVE-2026-82604
EUVD
EUVD-2026-68313

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
barebones bbedit to 15.5.5 (inc)
barebones bbedit 16.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-674 The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
CWE-404 The product does not release or incorrectly releases a resource before it is made available for re-use.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an uncontrolled recursion flaw in the Java Language Module of BareBones BBEdit up to version 15.5.5. It allows remote attackers to trigger excessive recursion, potentially causing a denial of service. Upgrading to version 16.0 is recommended to fix the issue.

Detection Guidance

This vulnerability is specific to the Java Language Module in BareBones BBEdit versions up to 15.5.5. Detection involves checking the installed version of BBEdit on your system. For macOS, you can run the command 'defaults read /Applications/BBEdit.app/Contents/Info CFBundleVersion' in Terminal to check the version.

Impact Analysis

The vulnerability could allow remote attackers to crash the application by causing uncontrolled recursion, leading to a denial of service. Users running affected versions should upgrade to BBEdit 16.0 to mitigate this risk.

Compliance Impact

The vulnerability involves uncontrolled recursion in the Java Language Module of BareBones BBEdit up to version 15.5.5, which could lead to denial-of-service conditions. This type of flaw may impact compliance with regulations like GDPR or HIPAA if it affects the integrity or availability of personal or health data processed by the software. However, the provided context does not specify direct implications for these standards.

Mitigation Strategies

Upgrade BBEdit to version 16.0 or later immediately. For licensed users, check eligibility for free or discounted upgrades at the BareBones website. Mac App Store users with active subscriptions should automatically receive the update.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-82604. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart