The flaw in Apache James MIME4J arises from allocating unlimited resources when parsing email MIME messages, which can be triggered by specially crafted content. Attackers can cause memory exhaustion or long processing times, leading to degraded service or service unavailability. The weakness is a resource allocation flaw that permits an attacker to overwhelm the host system with Parse requests without constraints.

This vulnerability affects Apache James MIME4J Core and Apache James MIME4J Dom before version 0.8.15. Systems running any of these libraries without the update are potentially susceptible to service disruption when receiving malicious or malformed MIME payloads.

No EPSS score is available and the vulnerability is not listed in the CISA KEV catalog. The CVSS score is not disclosed, but the impact description corresponds to a high‑severity denial‑of‑service scenario. An attacker can exploit this flaw remotely by sending crafted MIME messages to any service that processes email through these libraries, provided the application performs or forwards such parsing. The absence of limits or throttling allows the attacker to repeat the attack until sufficient resources are exhausted.