CVE-2026-87825

A flaw was found in zstd-jni. This use-after-free vulnerability occurs because streams and contexts only hold a dictionary's shared lock during the load call, allowing the dictionary to be closed while still being referenced. A remote attacker could exploit this by closing a dictionary after...

DEBIAN-CVE-2026-87825

zstd-jni before 1.5.7-14 contains a use-after-free vulnerability where streams and contexts hold a dictionary's shared lock only during the load call, allowing the dictionary to be closed while still referenced. Attackers can close a dictionary after associating it with a stream or context, causi...

PT-2026-89055

Name of the Vulnerable Software and Affected Versions zstd-jni versions prior to 1.5.7-14 Description A use-after-free issue exists in the ZstdCompressCtx and ZstdDecompressCtx components. This occurs because streams and contexts hold a dictionary's shared lock only during the load call, which...