unidbg

unidbg Allows you to emulate an Android native library, and an experimental iOS emulation. This is an educational project to learn more about the ELF/MachO file format and ARM assembly. Use it at your own risk ! Features Support MCP Model Context Protocol for AI-assisted debugging with Cursor and...

one-multiply-too-many-cve-2026-70638-llama-cpp-android-jni-integer-overflow

CVE-2026-70638 - llama.cpp LLaMA-Android JNI Integer Overflow Companion PoC for the Hunt-Benito article "One Multiply Too Many: CVE-2026-70638 — Integer Overflow in llama.cpp's Android JNI Heap Allocation" →...

android_demystification_toolbox

Android Demystification Toolbox Purpose ADT is a Miasm-based symbolic execution toolset designed to help model application behavior, research and test security vulnerabilities, and facilitate reversing hostile code. Features The ability to save/restore all threads & processes contexts A centraliz...

Project_CVE-2021-21985_PoC

ProjectCVE-2021-21985PoC JNI Compile gcc -fPIC -I"$JAVAHOME/include" -I"$JAVAHOME/include/linux" -shared -o libhello.so HelloJNI.c...

CLEANSTART-2026-DU71733 zstd-jni versions 1

CVE-2026-89046 affects multiple packages. zstd-jni versions 1. See references for individual vulnerability details...

CLEANSTART-2026-PD97726 zstd-jni versions 1

CVE-2026-89045 affects multiple packages. zstd-jni versions 1. See references for individual vulnerability details...

CLEANSTART-2026-UR93558 zstd-jni versions before 1

CVE-2026-87795 affects multiple packages. zstd-jni versions before 1. See references for individual vulnerability details...

CLEANSTART-2026-JE63853 vulnerability has been found in luben zstd-jni up to 1

Security vulnerability affects the strimzi-kafka-operator package. A vulnerability has been found in luben zstd-jni up to 1...

CLEANSTART-2026-BS35742 zstd-jni before 1

Security vulnerability affects the strimzi-kafka-operator package. zstd-jni before 1...

CLEANSTART-2026-OH53916 zstd-jni versions 1

CVE-2026-90560 affects multiple packages. zstd-jni versions 1. See references for individual vulnerability details...

CLEANSTART-2026-LQ70759 zstd-jni versions before 1

CVE-2026-87877 affects multiple packages. zstd-jni versions before 1. See references for individual vulnerability details...

CLEANSTART-2026-UA88149 zstd-jni before 1

CVE-2026-87823 affects multiple packages. zstd-jni before 1. See references for individual vulnerability details...

CLEANSTART-2026-YT55390 zstd-jni before 1

CVE-2026-87824 affects multiple packages. zstd-jni before 1. See references for individual vulnerability details...

Arti Mobile - Tor in Rust for Android and iOS

Arti Mobile: Tor in Rust for Android and iOS The official Arti Mobile library, supported by Tor Project, bringing the new Tor Rust runtime to mobile devices. This is a shared project for exposing a standard API for Tor Arti to Android and iOS applications. This was based on the following projects...

Security Bulletin:Vulnerabilities exists in zstd package used by IBM Netezza Appliance

Summary Vulnerabilities identified in IBM Netezza Appliance have been addressed in the latest security patch release of NPS. Vulnerability Details CVEID:CVE-2026-89045 DESCRIPTION: zstd-jni versions 1.4.8-4 through 1.5.7-13 fail to validate negative length parameters in...

Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in zstd-jni

Summary IBM SPSS Modeler is affected by multiple vulnerabilities in zstd-jni. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-87795 DESCRIPTION: zstd-jni versions before 1.5.7-14 fail to validate offset and length parameters in the ZstdDictCompress...

Use-after-free

The zstd-jni library is vulnerable to a use-after-free. The vulnerability is due to improper memory management during dictionary loading, which allows a remote attacker to potentially exploit the freed memory and compromise application stability or security...

Use After Free

zstd-jni is vulnerable to Use-After-Free. The vulnerability is due to streams and contexts releasing a dictionary's shared lock after the load operation while retaining references to the dictionary, which allows an attacker to close the dictionary and cause subsequent operations to access freed...

Out-of-Bounds Read

zstd-jni is vulnerable to Out-of-Bounds Read. The vulnerability is due to failure to validate the samples buffer capacity in Zstd.trainFromBufferDirect, which allows an attacker to supply oversized sample lengths that cause the native implementation to read beyond buffer boundaries, potentially...

Out-of-Bounds Read

zstd-jni is vulnerable to Out-of-Bounds Read. The vulnerability is due to improper 32-bit signed bounds checking of direct-ByteBuffer frame-size native methods, which allows an attacker to provide negative or overflowing offsets to read unintended memory locations, potentially causing JVM...