CVE-2026-87823highCWE-190

CVE-2026-87823: fallo de gravedad alta en luben zstd-jni

zstd-jni 1.1.1 through 1.5.7-13 Out-of-Bounds Read via Direct ByteBuffer Frame-Size Methods

Publicada el

Seguir esta CVE+ Monitorear zstd-jni+ Monitorear zstd-jni-java

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.8epss 0.4%
zstd-jni before 1.5.7-14 performs 32-bit signed bounds checks on three direct-ByteBuffer frame-size native methods, allowing out-of-bounds memory reads via negative or overflowing offsets. Attackers can supply negative offset values near Integer.MIN_VALUE to read unmapped memory, causing JVM termination or extracting arbitrary frame size data from unintended memory locations.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
Productos afectados
luben · zstd-jni
CVEs relacionadas — luben zstd-jni

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-89046HIGHzstd-jni 1.5.5-6 through 1.5.7-13 Out-of-Bounds Read via Negative OffsetEPSS 0.7%CVE-2026-87795HIGHzstd-jni 1.2.0 through 1.5.7-13 Out-of-Bounds Read via ZstdDictCompressEPSS 0.6%CVE-2026-90560HIGHzstd-jni 1.2.0 through 1.5.7-13 Out-of-Bounds Read via ZstdDictDecompressEPSS 0.6%CVE-2026-90852MEDIUMluben zstd-jni Dictionary Sharing ZstdCompressCtx.java ZstdCompressCtx.loadDict use after freeEPSS 0.5%CVE-2026-87824HIGHzstd-jni 1.3.3-1 through 1.5.7-13 Out-of-Bounds Read via Zstd.trainFromBufferDirectEPSS 0.4%CVE-2026-87877HIGHzstd-jni 1.3.8-4 through 1.5.7-13 Use-After-Free via Setters Called After close()EPSS 0.2%