rpm package
opensuse/zstd-jni&distro=openSUSE Leap 16.0
pkg:rpm/opensuse/zstd-jni&distro=openSUSE%20Leap%2016.0
Vulnerabilities (4)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-87877 | Hig | 7.7 | < 1.5.7.16-160000.1.1 | 1.5.7.16-160000.1.1 | Sep 9, 2026 | zstd-jni versions before 1.5.7-14 fail to validate closed state in setDict, setLongMax, setLevel and setRefMultipleDDicts methods of stream classes. Attackers can call these methods on closed streams to write through freed native pointers, corrupting unrelated objects or crashing | |
| CVE-2026-87825 | Hig | 7.7 | < 1.5.7.16-160000.1.1 | 1.5.7.16-160000.1.1 | Sep 9, 2026 | zstd-jni before 1.5.7-14 contains a use-after-free vulnerability where streams and contexts hold a dictionary's shared lock only during the load call, allowing the dictionary to be closed while still referenced. Attackers can close a dictionary after associating it with a stream | |
| CVE-2026-87824 | Hig | 7.5 | < 1.5.7.16-160000.1.1 | 1.5.7.16-160000.1.1 | Sep 9, 2026 | zstd-jni before 1.5.7-14 fails to validate the samples buffer capacity in Zstd.trainFromBufferDirect, allowing attackers to read past buffer boundaries by supplying oversized per-sample lengths. Attackers can trigger out-of-bounds memory access by providing crafted sample length | |
| CVE-2026-87823 | Hig | 8.2 | < 1.5.7.16-160000.1.1 | 1.5.7.16-160000.1.1 | Sep 9, 2026 | zstd-jni before 1.5.7-14 performs 32-bit signed bounds checks on three direct-ByteBuffer frame-size native methods, allowing out-of-bounds memory reads via negative or overflowing offsets. Attackers can supply negative offset values near Integer.MIN_VALUE to read unmapped memory, |
- affected < 1.5.7.16-160000.1.1fixed 1.5.7.16-160000.1.1
zstd-jni versions before 1.5.7-14 fail to validate closed state in setDict, setLongMax, setLevel and setRefMultipleDDicts methods of stream classes. Attackers can call these methods on closed streams to write through freed native pointers, corrupting unrelated objects or crashing
- affected < 1.5.7.16-160000.1.1fixed 1.5.7.16-160000.1.1
zstd-jni before 1.5.7-14 contains a use-after-free vulnerability where streams and contexts hold a dictionary's shared lock only during the load call, allowing the dictionary to be closed while still referenced. Attackers can close a dictionary after associating it with a stream
- affected < 1.5.7.16-160000.1.1fixed 1.5.7.16-160000.1.1
zstd-jni before 1.5.7-14 fails to validate the samples buffer capacity in Zstd.trainFromBufferDirect, allowing attackers to read past buffer boundaries by supplying oversized per-sample lengths. Attackers can trigger out-of-bounds memory access by providing crafted sample length
- affected < 1.5.7.16-160000.1.1fixed 1.5.7.16-160000.1.1
zstd-jni before 1.5.7-14 performs 32-bit signed bounds checks on three direct-ByteBuffer frame-size native methods, allowing out-of-bounds memory reads via negative or overflowing offsets. Attackers can supply negative offset values near Integer.MIN_VALUE to read unmapped memory,