303 matches found
com.github.luben/zstd-jni: luben zstd-jni: Remote use-after-free vulnerability in dictionary sharing
A flaw was found in luben zstd-jni. This flaw involves a use-after-free vulnerability in the ZstdCompressCtx.loadDict function, which handles dictionary sharing. A remote attacker could exploit this by manipulating dictionary sharing operations, potentially leading to denial of service, informati...
com.github.luben/zstd-jni: zstd-jni: Out-of-bounds read in ZstdDictCompress constructor leads to denial of service
A flaw was found in zstd-jni. This vulnerability occurs due to insufficient validation of offset and length parameters within the ZstdDictCompress constructor. An attacker can exploit this by providing untrusted values, leading to an out-of-bounds memory read. This can result in the disclosure of...
com.github.luben/zstd-jni: zstd-jni: Denial of Service (DoS) via out-of-bounds read in Zstd.trainFromBufferDirect
A flaw was found in zstd-jni. Attackers can exploit this by supplying oversized per-sample lengths to the Zstd.trainFromBufferDirect function, which fails to validate the samples buffer capacity. This allows for reading past buffer boundaries, leading to out-of-bounds memory access and ultimately...
zstd-jni: zstd-jni: Information disclosure or denial of service via out-of-bounds read
A flaw was found in zstd-jni. This out-of-bounds read vulnerability in the Zstd.getFrameContentSize function occurs because it fails to validate negative srcPosition arguments. A remote attacker can supply negative offset values, bypassing bounds checks and accessing the native frame-header parse...
com.github.luben/zstd-jni: zstd-jni: Denial of Service via out-of-bounds read in ZstdDictDecompress
A flaw was found in zstd-jni. This vulnerability, an out-of-bounds read, occurs in the ZstdDictDecompress constructor due to insufficient validation of offset and length arguments against dictionary array bounds. A remote attacker could exploit this by providing specially crafted input, leading t...
com.github.luben/zstd-jni: zstd-jni: Data corruption or denial of service via use-after-free vulnerability
A flaw was found in zstd-jni. This use-after-free vulnerability occurs because streams and contexts only hold a dictionary's shared lock during the load call, allowing the dictionary to be closed while still being referenced. A remote attacker could exploit this by closing a dictionary after...
com.github.luben/zstd-jni: zstd-jni: Use-After-Free vulnerability allows memory corruption and denial of service
A flaw was found in zstd-jni. An attacker could exploit a use-after-free vulnerability by calling specific methods on closed streams without proper validation. This could lead to memory corruption, potentially allowing the attacker to corrupt unrelated objects or cause the Java Virtual Machine JV...
Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.9 XP 6.0.7.GA release
JBoss EAP XP 6.0.7.GA release on the EAP 8.1.9 base. See references for release notes. This is a cumulative patch release zip for the JBoss EAP XP 6.0.7 runtime distribution for use with EAP 8.1.9 Security Fixes: netty-codec-http2: Netty: HTTP/2 header field values are not validated by default...
Security Bulletin: Vulnerability in zstd-jni affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.
Summary Potential vulnerability in zstd-jni has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...
CLEANSTART-2026-WL14663 vulnerability has been found in luben zstd-jni up to 1
Security vulnerability affects the kafka package. A vulnerability has been found in luben zstd-jni up to 1...
CLEANSTART-2026-KJ91421 zstd-jni versions 1
Security vulnerability affects the kafka package. zstd-jni versions 1...
CLEANSTART-2026-TA96182 zstd-jni versions 1
Security vulnerability affects the kafka package. zstd-jni versions 1...
CLEANSTART-2026-TG05541 zstd-jni versions before 1
Security vulnerability affects the kafka package. zstd-jni versions before 1...
CLEANSTART-2026-OL98302 zstd-jni before 1
Security vulnerability affects the kafka package. zstd-jni before 1...
CLEANSTART-2026-EI97516 zstd-jni versions before 1
Security vulnerability affects the kafka package. zstd-jni versions before 1...
CLEANSTART-2026-KT47812 zstd-jni versions 1
Security vulnerability affects the kafka package. zstd-jni versions 1...
CLEANSTART-2026-GN68002 zstd-jni before 1
Security vulnerability affects the kafka package. zstd-jni before 1...
Security Bulletin:Vulnerability in zstd-jni may affect IBM Infosphere Change Data Capture (CVE-2026-90852)
Summary A security vulnerability has been identified in zstd-jni, JNI bindings for Zstd native library. zstd-jni is used by IBM Infosphere Change Data Capture. IBM has addressed this vulnerability. Refer to the "Remediation/Fixes" section below for remediation details. Vulnerability Details...
Security Bulletin:Multiple vulnerabilities in zstd-jni may affect IBM Infosphere Change Data Capture (CVE-2026-89045, CVE-2026-89046, CVE-2026-90560)
Summary Multiple security vulnerabilities have been identified in zstd-jni, JNI bindings for Zstd native library. zstd-jni is used by IBM Infosphere Change Data Capture. IBM has addressed these vulnerabilities. Refer to the "Remediation/Fixes" section below for remediation details. Vulnerability...