vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-87795

zstd-jni 1.2.0 through 1.5.7-13 Out-of-Bounds Read via ZstdDictCompress

HIGH
8.2
CVSS Score
Published: September 9, 2026 at 10:07 AM UTC
Updated: September 14, 2026 at 01:19 PM UTC
1 product affected across 1 vendorZstd Jni

Using zstd-jni by luben?

Get instant alerts when new vulnerabilities affect zstd-jni - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH8.2
Exploit prediction
EPSS 0.6%
SSVC
PoC

Description

zstd-jni versions before 1.5.7-14 fail to validate offset and length parameters in the ZstdDictCompress constructor, allowing out-of-bounds memory reads. Attackers can supply untrusted offset or length values to read native heap memory into the compression dictionary, typically causing JVM crashes.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Zstd Jni· Lubenmaven
60%
1.2.0 ≤ v < 1.5.7-141.2.0
Affected range stops below 1.5.7-14, so it looks safe — our inference, not a vendor statement

References (8)

Vendor Advisory
Source: cverecord
https://github.com/luben/zstd-jni/security/advisories/GHSA-ff36-7w3w-g8rm
Patch
Source: cverecord
https://github.com/luben/zstd-jni/commit/0d64de4dee6606ff506be36c7f2e714ad0c80fdb
Technical Description
Source: cverecord
https://github.com/luben/zstd-jni/blob/v1.5.7-13/src/main/java/com/github/luben/zstd/ZstdDictCompress.java
Technical Description
Source: cverecord
https://github.com/luben/zstd-jni/blob/v1.5.7-13/src/main/native/jni_fast_zstd.c
Technical DescriptionPatch
Source: cverecord
https://github.com/luben/zstd-jni/commit/1c4e5a6c3ce8458095225d987d669e6a0937734a
Release Notes
Source: cverecord
https://github.com/luben/zstd-jni/releases/tag/v1.5.7-14
Product
Source: cverecord
https://github.com/luben/zstd-jni
Third Party Advisory
Source: cverecord
https://www.vulncheck.com/advisories/zstd-jni-1.2.0-through-1.5.7-13-out-of-bounds-read-via-zstddictcompress

SSVC — Action Prioritization

SSVCPoCAutomatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

8.2HIGHVulnCheck
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusAWAITING ANALYSIS
CWE
CWE-125

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card