CVE-2026-8484
Heap buffer overflow in Jansi
- State
- Published
- Severity
- 4.8 Medium
- Published
- Jun 16, 2026
- Updated
- Jun 16, 2026
- Reserved
- May 13, 2026
Description
A heap buffer overflow vulnerability exists in the Jansi JNI "ioctl()" wrapper due to a lack of size verification for the argument array before the system call. This can lead to heap corruption and application crashes (DoS). All versions are believed to be vulnerable. This project is unmaintained at the time of CVE assignment.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 4.8 Medium | CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N | CERT-PL |
Weaknesses
- CWE-122 Heap-based Buffer Overflow
Affected Products
| Product | Versions |
|---|---|
jansiFuseSource |
|
References
- https://cert.pl/en/posts/2026/06/CVE-2026-8484third-party-advisory
- https://github.com/fusesource/jansi/tree/masterproduct
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.