Heap Buffer Overflow Vulnerability in Jansi JNI by Fusesource

CVE-2026-8484

What is CVE-2026-8484?

A heap buffer overflow vulnerability has been identified in the Jansi JNI implementation, specifically within the 'ioctl()' wrapper. This issue arises from the absence of adequate size verification for the argument array before executing a system call, potentially leading to heap corruption. As a consequence, this vulnerability can cause significant application crashes, resulting in denial-of-service (DoS) scenarios. It is important to note that all versions of the Jansi product are affected, and the project is currently unmaintained, which increases the risk of exploitation.

References