← volver
CVE-2026-8484

Heap buffer overflow in Jansi

CVSS 4.8 MEDIUMEPSS 0.1%CWE-122
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 4.8EPSS 0.1%KEV nãoPoC Nuclei Metasploit Patch
Ciclo de vida
16 jun 2026Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A heap buffer overflow vulnerability exists in the Jansi JNI "ioctl()" wrapper due to a lack of size verification for the argument array before the system call. This can lead to heap corruption and application crashes (DoS). All versions are believed to be vulnerable. This project is unmaintained at the time of CVE assignment.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Productos afectados
FuseSource · jansi