CVE-2026-87823 zstd-jni 1.1.1 through 1.5.7-13 Out-of-Bounds Read via Direct ByteBuffer Frame-Size Methods

zstd-jni before 1.5.7-14 performs 32-bit signed bounds checks on three direct-ByteBuffer frame-size native methods, allowing out-of-bounds memory reads via negative or overflowing offsets. Attackers can supply negative offset values near Integer.MINVALUE to read unmapped memory, causing JVM...

PT-2026-89053

Name of the Vulnerable Software and Affected Versions zstd-jni versions prior to 1.5.7-14 Description The software performs 32-bit signed bounds checks on three direct-ByteBuffer frame-size native methods, which allows out-of-bounds memory reads through negative or overflowing offsets. An attacke...