Buffer overflow in Fusesource Jansi
CVE-2026-8484
A heap buffer overflow vulnerability exists in the Jansi JNI "ioctl()" wrapper due to a lack of size verification for the argument array before the system call. This can lead to heap corruption and application crashes (DoS). All versions are believed to be vulnerable. This project is unmaintained at the time of CVE assignment.
Vulnerability class: Buffer Overflow
Published · last modified .
EPSS exploit prediction
EPSS: 0.002 (7.4th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 7th percentile — 7.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.001 · newest: 0.002 · change: +0.000
Affected products
- Fusesource Jansi — versions 0
Weakness classification (CWE)
References
- cert.pl/en/posts/2026/06/CVE-2026-8484 (third-party-advisory)
- github.com/fusesource/jansi/tree/master (product)