[ CVE-2026-87825 · Published 9 Sep 2026 ]
Vulnerability in luben zstd-jni
[ Why it matters ]Priority signals
- Public proof-of-concept exploit exists (CISA SSVC)
[ Description ]Official description
zstd-jni before 1.5.7-14 contains a use-after-free vulnerability where streams and contexts hold a dictionary's shared lock only during the load call, allowing the dictionary to be closed while still referenced. Attackers can close a dictionary after associating it with a stream or context, causing subsequent read or write operations to access freed native memory, resulting in silent data corruption or JVM crashes.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.
[ Advisories ]Government CERT advisories
-
CERT-FRCERTFR-2026-AVI-1336
Multiple vulnerabilities in IBM products Translated from French
Multiple vulnerabilities have been discovered in IBM products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service.
-
BSI CERT-BundWID-SEC-2026-3791
IBM SPSS: Multiple vulnerabilities Translated from German
[ References ]References
- github.com/luben/zstd-jni/security/advisories/GHSA-947w-pxjj-c7m9vendor-advisory
- github.com/luben/zstd-jni/commit/393d7311766abbc285b149302c0fe1f94b16d555patch
- github.com/luben/zstd-jni/commit/a560131d7834598afd9cea6b7c107bc88e915936patch
- github.com/luben/zstd-jni/blob/v1.5.7-13/src/main/java/com/github/luben/zstd/ZstdInputS…technical-description
- github.com/luben/zstd-jni/blob/v1.5.7-13/src/main/java/com/github/luben/zstd/BaseZstdBu…technical-description
- github.com/luben/zstd-jni/releases/tag/v1.5.7-14release-notes
- github.com/luben/zstd-jni/commit/0827ed02551bbd8d6f8e4bbff99d83bf50f91938technical-descriptionpatch
- github.com/luben/zstd-jniproduct
- www.vulncheck.com/advisories/zstd-jni-1.3.8-4-through-1.5.7-13-use-after-free-of-compre…third-party-advisory