CyberRota Analysis
AI-GeneratedVersions of zstd-jni prior to 1.5.7-14 are vulnerable due to improper validation of closed states in specific stream class methods, allowing attackers to exploit freed native pointers. This can lead to memory corruption or JVM crashes, posing significant risks to application stability and security. Organizations utilizing affected zstd-jni versions should prioritize patching to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
zstd-jni versions before 1.5.7-14 fail to validate closed state in setDict, setLongMax, setLevel and setRefMultipleDDicts methods of stream classes. Attackers can call these methods on closed streams to write through freed native pointers, corrupting unrelated objects or crashing the JVM.