PT-2025-48344

🗓️ 26 Nov 2025 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 6 Views

Out-of-bounds memory in lz4-java 1.8.0 and earlier enables remote denial of service and adjacent memory reads via untrusted input.

Reporter	Title	Published	Views	Family All 656
IBM Security Bulletins	Security Bulletin: Vulnerability in yawkat LZ4 Java affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	22 Jun 202613:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for February 2025.	13 Mar 202616:55	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in lz4-java-1.7.1.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2025-12183)	2 Feb 202612:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Release addresses multiple vulnerabilities related to Apache Tomcat.	24 Mar 202613:26	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in lz4-java-1.8.1.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2025-66566)	2 Feb 202612:48	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities in IBM DB2 bundled with IBM Application Performance Management products.	21 May 202614:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in lz4-java-1.8.0.jar	16 Apr 202617:52	–	ibm
IBM Security Bulletins	Security Bulletin: Race Condition in Eclipse Jersey (Versions 2.45, 3.0.16, 3.1.9) May Bypass Critical SSL Configurations and Compromise Secure Connections, affects watsonx.data	17 Mar 202612:36	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in lz4 affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	22 Jun 202613:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache ZooKeeper	24 Jun 202621:38	–	ibm

Source	Link
t	www.t.me/CVEtracker/38444
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-24308
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-66566
github	www.github.com/yawkat/lz4-java
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-24281
sites	www.sites.google.com/sonatype.com/vulnerabilities/cve-2025-12183
t	www.t.me/cveNotify/147038
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2025-12183
osv	www.osv.dev/vulnerability/ghsa-6hg6-v5c8-fphq
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-12383

21 Jun 2026 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 29.4

CVSS 49.4

CVSS 3.17.5

EPSS0.01177

SSVC