AIKIDO-2026-777190
zstd-jni is vulnerable to Out-of-bounds Read
82
High Risk
This Affects:
zstd-jniTL;DR
ZstdDictCompress checks only that offset is not past the end of the dictionary array, then passes offset and length into a native copy. A negative offset or a length past the array is accepted, so the native copy reads past the array into adjacent heap memory and can crash the JVM. The fix rejects a negative offset or length and rejects a range that extends past the array.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and your code passes an offset or length into ZstdDictCompress.
Background info
zstd-jni is vulnerable to Out-of-bounds Read in versions 1.2.0 - 1.5.7-13.
How to fix this
Upgrade the com.github.luben:zstd-jni library to the patch version.
Links
GitHub Release
Fix Commits
github.com/luben/zstd-jni/commit/0d64de4dee6606ff506be36c7f2e714ad0c80fdbgithub.com/luben/zstd-jni/commit/1c4e5a6c3ce8458095225d987d669e6a0937734aOther
github.com/luben/zstd-jni/compare/v1.5.7-13...v1.5.7-14github.com/luben/zstd-jnigithub.com/luben/zstd-jni/blob/v1.5.7-13/src/main/java/com/github/luben/zstd/ZstdDictCompress.javagithub.com/luben/zstd-jni/blob/v1.5.7-13/src/main/native/jni_fast_zstd.c
vulncheck.com/advisories/zstd-jni-1.2.0-through-1.5.7-13-out-of-bounds-read-via-zstddictcompress
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.