Input Validation Flaw in HdrHistogram by HdrHistogram Organization
CVE-2026-14685

4.8MEDIUM

Key Information:

Vendor: HdrHistogram Organization
Status: Hdrhistogram
Vendor: CVE Published:; 4 July 2026

🔔 Create HdrHistogram Organization Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-14685?

An input validation issue has been identified in HdrHistogram, specifically within the recordValueWithCount function of the AbstractHistogram component. This flaw arises from manipulation of the Count argument, potentially leading to inconsistent internal states within the application. The vulnerability can only be exploited locally, posing risks when untrusted users have access to the system. Although the issue was reported to the team for remediation, no response has been documented, and public knowledge of the vulnerability raises concerns for systems using affected versions.

Affected Version(s)

HdrHistogram 2.2.0

HdrHistogram 2.2.1

HdrHistogram 2.2.2

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-14685 - Proof of Concept