CVE-2025-1634: Red Hat Build Of Apache Camel 4.8 For Quarkus 3.15

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError.

Affected products

• Red Hat Red Hat Build Of Apache Camel 4.8 For Quarkus 3.15
• Red Hat Red Hat Build Of Quarkus
• Red Hat Red Hat Build Of Quarkus 3.15.3.sp1
• Red Hat Red Hat Build Of Quarkus 3.8.6.sp3
• Red Hat Streams For Apache Kafka 2.9.1
• Red Hat Streams For Apache Kafka 3.0.0
• Red Hat Streams For Apache Kafka 3.1.0

Published 2025-02-26. Last modified 2026-06-17.