Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
zstd-jni before 1.5.7-14 fails to validate the samples buffer capacity in Zstd.trainFromBufferDirect, allowing attackers to read past buffer boundaries by supplying oversized per-sample lengths. Attackers can trigger out-of-bounds memory access by providing crafted sample length arrays that cause the native implementation to walk past the buffer allocation, resulting in JVM termination.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
🚨 HIGH severity CVE-2026-87824 (CVSS 7.5) affects zstd-jni <1[.]5[.]7-14. Out-of-bounds memory read in Zstd[.]trainFromBufferDirect can crash JVM. Patch immediately to v1[.]5[.]7-14+. #CVE #Vulnerability #PatchNow https://t.co/QdFXxXX2OT
Post summary
High severity CVE‑2026‑87824 causes an out‑of‑bounds memory read in zstd‑jni, potentially crashing the JVM. A patch to version 1.5.7‑14+ is required immediately.