Количество 5
Количество 5
CVE-2026-89046
(zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds re ...)
CVE-2026-89046
zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds read vulnerability in Zstd.getFrameContentSize that fails to validate negative srcPosition arguments. Attackers can supply negative offset values that bypass bounds checks and reach the native frame-header parser, causing out-of-bounds memory reads that lead to information disclosure or JVM crashes.
CVE-2026-89046
zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds read vulnerability in Zstd.getFrameContentSize that fails to validate negative srcPosition arguments. Attackers can supply negative offset values that bypass bounds checks and reach the native frame-header parser, causing out-of-bounds memory reads that lead to information disclosure or JVM crashes.
CVE-2026-89046
zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds re ...
GHSA-h98q-h7vh-hjv2
zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds read vulnerability in Zstd.getFrameContentSize that fails to validate negative srcPosition arguments. Attackers can supply negative offset values that bypass bounds checks and reach the native frame-header parser, causing out-of-bounds memory reads that lead to information disclosure or JVM crashes.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-89046 (zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds re ...) | CVSS3: 8.2 | 1% Низкий | 5 дней назад |
 | CVE-2026-89046 zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds read vulnerability in Zstd.getFrameContentSize that fails to validate negative srcPosition arguments. Attackers can supply negative offset values that bypass bounds checks and reach the native frame-header parser, causing out-of-bounds memory reads that lead to information disclosure or JVM crashes. | CVSS3: 8.2 | 1% Низкий | 5 дней назад |
 | CVE-2026-89046 zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds read vulnerability in Zstd.getFrameContentSize that fails to validate negative srcPosition arguments. Attackers can supply negative offset values that bypass bounds checks and reach the native frame-header parser, causing out-of-bounds memory reads that lead to information disclosure or JVM crashes. | CVSS3: 8.2 | 1% Низкий | 5 дней назад |
| CVE-2026-89046 zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds re ... | CVSS3: 8.2 | 1% Низкий | 5 дней назад |
| GHSA-h98q-h7vh-hjv2 zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds read vulnerability in Zstd.getFrameContentSize that fails to validate negative srcPosition arguments. Attackers can supply negative offset values that bypass bounds checks and reach the native frame-header parser, causing out-of-bounds memory reads that lead to information disclosure or JVM crashes. | CVSS3: 8.2 | 1% Низкий | 5 дней назад |
Уязвимостей на страницу