OSV-2026-86
NoneCVSS
—
EPSS
—
Published
Jan 18, 2026
CISA due date
—
The record
Security exception in java.base/java.util.Arrays.copyOfRange
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| OSS-Fuzz | apache-poi | REL_5_5_1 | No fix |
Related vulnerabilities
- OSV-2026-177 Security exception in org.apache.poi.util.IOUtils.safelyAllocate Also affects apache-poi
- OSV-2026-87 Security exception in org.apache.poi.util.IOUtils.safelyAllocate Also affects apache-poi
- OSV-2025-1061 Security exception in org.apache.poi.hssf.record.aggregates.SharedValueManager$SharedForm… Also affects apache-poi