CyberRota Analysis
AI-GeneratedThe zstd-jni library prior to version 1.5.7-14 is vulnerable due to a use-after-free flaw that allows attackers to close a dictionary while it is still in use by streams or contexts. This can lead to silent data corruption or crashes of the Java Virtual Machine (JVM) during read or write operations. Organizations using this library should prioritize patching to mitigate the risk of exploitation and ensure system stability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
zstd-jni before 1.5.7-14 contains a use-after-free vulnerability where streams and contexts hold a dictionary's shared lock only during the load call, allowing the dictionary to be closed while still referenced. Attackers can close a dictionary after associating it with a stream or context, causing subsequent read or write operations to access freed native memory, resulting in silent data corruption or JVM crashes.