CVE-2024-52981: Elastic Elasticsearch

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

An issue was discovered in Elasticsearch, where a large recursion using the Well-KnownText formatted string with nested GeometryCollection objects could cause a stackoverflow.

Affected products

• Elastic Elasticsearch: from 7.17.0, before 7.17.24 (fixed in 7.17.24); from 8.0.0, before 8.15.1 (fixed in 8.15.1)

Published 2025-04-08. Last modified 2026-06-17.