Kwetsbaarheden verholpen in Oracle Java

Summary

Details

Vulnerabilities 11

• High 8.8
  CVE-2025-12183

  org.lz4:lz4-java - Out-of-Bounds Memory Access

  Out-of-bounds memory operations in org.lz4:lz4-java 1.8.0 and earlier allow remote attackers to cause denial of service and read adjacent memory via untrusted compressed input.

  zipkin spark-4.0-scala-2.13 spark-4.1-scala-2.13 strimzi-kafka-operator-kafka-thirdparty-libs-cc Debian Ubuntu Wolfi Maven
  Nov 28, 2025
• High 8.1
  CVE-2025-47219

  In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer whi…

  gst-plugins-good1.0 gst-plugins-good1.0 gst-plugins-good Debian Ubuntu Alpine
  Aug 7, 2025
• High 7.8
  CVE-2025-7425

  Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr

  A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this corruption prevents the proper cleanup of ID attr…

  Red Hat GNOME Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux Wolfi
  Jul 10, 2025
• High 7.5
  CVE-2025-6021

  Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2

  A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux Alpine
  Jun 12, 2025
• High 7.5
  CVE-2026-21945

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine Wolfi
  Jan 20, 2026
• High 7.4
  CVE-2026-21932

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine Wolfi
  Jan 20, 2026
• Medium 6.1
  CVE-2026-21933

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine Wolfi
  Jan 20, 2026
• Medium 4.8
  CVE-2026-21925

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine Wolfi
  Jan 20, 2026
• Medium 4.3
  CVE-2025-43368

  A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26, iOS 26 and iPad…

  Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu
  Sep 15, 2025
• Low 3.7
  CVE-2025-6052

  Glib: integer overflow in g_string_maybe_expand() leading to potential buffer overflow in glib gstring

  A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it do…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Jun 13, 2025
• Low 3.1
  CVE-2026-21947

  Vulnerability in Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle Java SE: 8u471-b50…

  Oracle Oracle Java SE openjfx Ubuntu
  Jan 20, 2026

Revision history

1. 2026-01-21 #1.0.0

   Initiele versie

References

• Reference
  https://www.oracle.com/security-alerts/cpujan2026.html