CyberRota Analysis
AI-GeneratedThe vulnerability affects zstd-jni versions prior to 1.5.7-14, where improper bounds checks in certain native methods can lead to out-of-bounds memory reads. This can allow attackers to exploit negative or overflowing offsets, potentially causing JVM termination or unauthorized access to sensitive data. Organizations using affected versions should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
zstd-jni before 1.5.7-14 performs 32-bit signed bounds checks on three direct-ByteBuffer frame-size native methods, allowing out-of-bounds memory reads via negative or overflowing offsets. Attackers can supply negative offset values near Integer.MIN_VALUE to read unmapped memory, causing JVM termination or extracting arbitrary frame size data from unintended memory locations.