CVE-2026-87824

🗓️ 09 Sep 2026 14:32:44Reported by MendType

Out-of-bounds memory access in zstd-jni Zstd.trainFromBufferDirect causes JVM termination.

Reporter	Title	Published	Views	Family All 44
IBM Security Bulletins	Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in zstd-jni, snappy-java, and Apache Parquet	6 Oct 202618:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities	24 Sep 202614:38	–	ibm
BDU FSTEC	The vulnerability of the Zstd.trainFromBufferDirect() function in the zstd-jni data compression library allows a attacker to cause a service failure.	10 Sep 202600:00	–	bdu_fstec
CVE	CVE-2026-87824	9 Sep 202614:32	–	cve
Cvelist	CVE-2026-87824 zstd-jni 1.3.3-1 through 1.5.7-13 Out-of-Bounds Read via Zstd.trainFromBufferDirect	9 Sep 202614:32	–	cvelist
Debian CVE	CVE-2026-87824	9 Sep 202614:32	–	debiancve
EUVD	EUVD-2026-75022	9 Sep 202614:32	–	euvd
NVD	CVE-2026-87824	9 Sep 202615:17	–	nvd
Tenable Nessus	openSUSE 16 Security Update : zstd-jni (openSUSE-SU-2026:21902-1)	25 Sep 202600:00	–	nessus
Tenable Nessus	SUSE SLES16 Security Update : zstd-jni (SUSE-SU-2026:23868-1)	27 Sep 202600:00	–	nessus

Vulners

Node

luben zstd-jniRange1.3.3-1–1.5.7-14

Source	Link
github	www.github.com/luben/zstd-jni/commit/bba6cfca2c0897f1fa004f4193247479f10da853
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-87824
github	www.github.com/luben/zstd-jni/security/advisories/GHSA-257p-3h6w-pg7h
github	www.github.com/luben/zstd-jni/blob/v1.5.7-13/src/main/native/jni_zdict.c
github	www.github.com/luben/zstd-jni/blob/v1.5.7-13/src/main/java/com/github/luben/zstd/Zstd.java
github	www.github.com/luben/zstd-jni/releases/tag/v1.5.7-14
github	www.github.com/luben/zstd-jni
repo1	www.repo1.maven.org/maven2/com/github/luben/zstd-jni/
vulncheck	www.vulncheck.com/advisories/zstd-jni-1.3.3-1-through-1.5.7-13-out-of-bounds-read-via-zstd-trainfrombufferdirect
github	www.github.com/luben/zstd-jni/commit/53d3c6342883f7d6717b2477a7f9c1b4a4a56980

08 Oct 2026 00:08Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.5

CVSS 48.7

EPSS0.00389

SSVC