PT-2026-125057

ZSTD seekable decompress shortens the requested length to the end of the data without checking that the offset is before it. For an offset past the end, it returns a wrapped-around length without writing anything, and Seekable::decompress passed that length to Vec::set len. With the seekable...

PT-2026-125064

InBuffer's fields are public, so safe code can set pos past the end of src. The position was passed to the C library unchecked, and ZSTD seekable compressStream, unlike the other streaming functions, does not validate it: it read past the end of the input slice, by up to the frame size, and...

PT-2026-125054

With CParameter::StableInBuffertrue experimental feature, the C library keeps a pointer to the input of one streaming call and reads from it in later calls, including flush stream and end stream, which take no input. An InBuffer only borrows its slice for one call, so safe code could free it in...

PT-2026-125065

When a multithreaded frame zstdmt feature, CParameter::NbWorkers is left unfinished, its jobs may still be running on the worker threads: the C library only waits for them when the next frame starts, or when the context is freed. A session reset makes the context accept changes again in the...

CLEANSTART-2026-DU71733 zstd-jni versions 1

CVE-2026-89046 affects multiple packages. zstd-jni versions 1. See references for individual vulnerability details...

CLEANSTART-2026-UR93558 zstd-jni versions before 1

CVE-2026-87795 affects multiple packages. zstd-jni versions before 1. See references for individual vulnerability details...

CLEANSTART-2026-BS35742 zstd-jni before 1

Security vulnerability affects the strimzi-kafka-operator package. zstd-jni before 1...

CLEANSTART-2026-OH53916 zstd-jni versions 1

CVE-2026-90560 affects multiple packages. zstd-jni versions 1. See references for individual vulnerability details...

CLEANSTART-2026-PD97726 zstd-jni versions 1

CVE-2026-89045 affects multiple packages. zstd-jni versions 1. See references for individual vulnerability details...

CLEANSTART-2026-JE63853 vulnerability has been found in luben zstd-jni up to 1

Security vulnerability affects the strimzi-kafka-operator package. A vulnerability has been found in luben zstd-jni up to 1...

CLEANSTART-2026-LQ70759 zstd-jni versions before 1

CVE-2026-87877 affects multiple packages. zstd-jni versions before 1. See references for individual vulnerability details...

CLEANSTART-2026-UA88149 zstd-jni before 1

CVE-2026-87823 affects multiple packages. zstd-jni before 1. See references for individual vulnerability details...

CLEANSTART-2026-YT55390 zstd-jni before 1

CVE-2026-87824 affects multiple packages. zstd-jni before 1. See references for individual vulnerability details...

PT-2026-122699

Security vulnerability affects the strimzi-kafka-operator package. zstd-jni before 1...

PT-2026-122758

Security vulnerability affects the strimzi-kafka-operator package. A vulnerability has been found in luben zstd-jni up to 1...

Security Bulletin:Vulnerabilities exists in zstd package used by IBM Netezza Appliance

Summary Vulnerabilities identified in IBM Netezza Appliance have been addressed in the latest security patch release of NPS. Vulnerability Details CVEID:CVE-2026-89045 DESCRIPTION: zstd-jni versions 1.4.8-4 through 1.5.7-13 fail to validate negative length parameters in...

Security Bulletin:Vulnerabilities exists in zstd package used by IBM Netezza Appliance

Summary Vulnerabilities identified in IBM Netezza Appliance have been addressed in the latest security patch release of NPS. Vulnerability Details CVEID:CVE-2026-87795 DESCRIPTION: zstd-jni versions before 1.5.7-14 fail to validate offset and length parameters in the ZstdDictCompress constructor,...

Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in zstd-jni

Summary IBM SPSS Modeler is affected by multiple vulnerabilities in zstd-jni. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-87795 DESCRIPTION: zstd-jni versions before 1.5.7-14 fail to validate offset and length parameters in the ZstdDictCompress...

Use-after-free

The zstd-jni library is vulnerable to a use-after-free. The vulnerability is due to improper memory management during dictionary loading, which allows a remote attacker to potentially exploit the freed memory and compromise application stability or security...

Use After Free

zstd-jni is vulnerable to Use-After-Free. The vulnerability is due to streams and contexts releasing a dictionary's shared lock after the load operation while retaining references to the dictionary, which allows an attacker to close the dictionary and cause subsequent operations to access freed...