PT-2025-48344

🗓️ 26 Nov 2025 00:00:00Reported by Positive TechnologiesType

Out-of-bounds memory in lz4-java 1.8.0 and earlier enables remote denial of service and adjacent memory reads via untrusted input.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Rational Developer for i	15 Sep 202613:43	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in lz4-java-1.7.1.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2025-12183)	2 Feb 202612:05	–	ibm
IBM Security Bulletins	Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale and the HDFS layer are now addressed in 5.2.3.8 or higher and 6.0.1.1 or higher	13 Aug 202616:43	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities in IBM DB2 bundled with IBM Application Performance Management products.	21 May 202614:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to Missing Release of Resource after Effective Lifetime and Improper Certificate Validation due to HttpClient (CVE-2026-64607 & CVE-2026-71290)	4 Sep 202612:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager - Multiple CVEs addressed related to SOLR and its dependencies (such as Jetty) affecting ODM-9.0.0 and older versions	19 Jun 202620:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in lz4-java-1.8.0.jar	16 Apr 202617:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2 and IBM Java SDK used by IBM Security Verify Governance contain multiple vulnerabilities	21 Aug 202609:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in Apache HttpComponents Client affect IBM Content Navigator	28 Sep 202610:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	23 Jul 202618:00	–	ibm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-59949
osv	www.osv.dev/vulnerability/ghsa-72hv-8253-57qq
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-47848
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-12185
security-tracker	www.security-tracker.debian.org/tracker/CVE-2025-12183
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-13506
bdu	www.bdu.fstec.ru/vul/2025-15118
osv	www.osv.dev/vulnerability/CVE-2026-55831
osv	www.osv.dev/vulnerability/ghsa-mfg7-5gfp-c4w3
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-KF94035.json

01 Oct 2026 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 29.4

CVSS 3.15.3 - 7.5

CVSS 48.8

EPSS0.00697

SSVC