Skip to content
OpenAdvisories

Package · Debian

zstd-jni-java

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.0
    CVE-2026-89045

    zstd-jni 1.4.8-4 through 1.5.7-13 Denial of Service via Negative Length

    zstd-jni versions 1.4.8-4 through 1.5.7-13 fail to validate negative length parameters in ZstdInputStreamNoFinalizer.read(), allowing attackers to trigger infinite loops. Attackers can pass negative length values to cause the read method to spin indefinitely …

    luben zstd-jni zstd-jni-java zstd-jni-java Debian Ubuntu