PT-2025-48344

🗓️ 26 Nov 2025 00:00:00Reported by Positive TechnologiesType

Out-of-bounds memory in lz4-java 1.8.0 and earlier enables remote denial of service and adjacent memory reads via untrusted input.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Bouncy Castle for Java	22 Oct 202619:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Rational Developer for i	15 Sep 202613:43	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in lz4-java-1.7.1.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2025-12183)	2 Feb 202612:05	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Netty affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	25 Aug 202618:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ is affected by multiple vulnerabilities in Bouncy Castle for Java	29 Oct 202611:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities	24 Sep 202614:38	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities in IBM DB2 bundled with IBM Application Performance Management products.	21 May 202614:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in lz4-java-1.8.0.jar	16 Apr 202617:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2 and IBM Java SDK used by IBM Security Verify Governance contain multiple vulnerabilities	21 Aug 202609:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in netty-codec-http-4.1.135.Final.jar	15 Sep 202620:38	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/ghsa-r7wm-3cxj-wff9
osv	www.osv.dev/vulnerability/CLEANSTART-2026-KF94035
osv	www.osv.dev/vulnerability/CVE-2026-14682
osv	www.osv.dev/vulnerability/CVE-2025-12383
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-UW43752.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-12802
sonatype	www.sonatype.com/security-advisories/cve-2025-12183
osv	www.osv.dev/vulnerability/CVE-2026-13506
twitter	www.twitter.com/oss_security/status/1996692881990640074
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-11143

15 Oct 2026 00:00Current

7High risk

Vulners AI Score7

CVSS 3.17.5 - 9.8

CVSS 48.8

EPSS0.00747

SSVC