Luben Zstd-Jni
5 CVEs affecting Luben Zstd-Jni. Latest disclosed: 2026-09-09. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-87823 | High | 8.2 | 2026-09-09 | zstd-jni before 1.5.7-14 performs 32-bit signed bounds checks on three direct-ByteBuffer frame-size native methods, allowing out-of-bounds memory reads via neg… |
CVE-2026-87795 | High | 8.2 | 2026-09-09 | zstd-jni versions before 1.5.7-14 fail to validate offset and length parameters in the ZstdDictCompress constructor, allowing out-of-bounds memory reads. Attac… |
CVE-2026-87877 | High | 7.7 | 2026-09-09 | zstd-jni versions before 1.5.7-14 fail to validate closed state in setDict, setLongMax, setLevel and setRefMultipleDDicts methods of stream classes. Attackers… |
CVE-2026-87825 | High | 7.7 | 2026-09-09 | zstd-jni before 1.5.7-14 contains a use-after-free vulnerability where streams and contexts hold a dictionary's shared lock only during the load call, allowing… |
CVE-2026-87824 | High | 7.5 | 2026-09-09 | zstd-jni before 1.5.7-14 fails to validate the samples buffer capacity in Zstd.trainFromBufferDirect, allowing attackers to read past buffer boundaries by supp… |