Cloudanix VulnDB

CVE-2026-87823

High · 8.2

CVSS

8.2

EPSS

0.4%

Published

Sep 9, 2026

CISA due date

—

The record

zstd-jni before 1.5.7-14 performs 32-bit signed bounds checks on three direct-ByteBuffer frame-size native methods, allowing out-of-bounds memory reads via negative or overflowing offsets. Attackers can supply negative offset values near Integer.MIN_VALUE to read unmapped memory, causing JVM termination or extracting arbitrary frame size data from unintended memory locations.

Affected packages

Ecosystem Package Introduced Fixed

Related vulnerabilities