Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: luben zstd-jni 1.5.7-14 Clear all filters
TI-2026-60350 CVE-2026-89046 · GHSA-h98q-h7vh-hjv2

zstd-jni 1.5.5-6 through 1.5.7-13 Out-of-Bounds Read via Negative Offset

Priority HIGH 77

zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds read vulnerability in Zstd.getFrameContentSize that fails to validate negative srcPosition arguments.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.0065 Published 2026-09-10 Partial fix · 1.5.7-14 CWE-125
TI-2026-60349 CVE-2026-89045 · GHSA-r8cw-jvfx-h6x5

zstd-jni 1.4.8-4 through 1.5.7-13 Denial of Service via Negative Length

Priority MEDIUM 56

zstd-jni versions 1.4.8-4 through 1.5.7-13 fail to validate negative length parameters in ZstdInputStreamNoFinalizer.read(), allowing attackers to trigger infinite loops.

CVSS 4.0MEDIUM 5.1 Local No auth No interaction EPSS 0.00177 Published 2026-09-10 Partial fix · 1.5.7-14 CWE-835