CVE-2026-8484 MEDIUM

CVE-2026-8484: Heap buffer overflow in Jansi

Vendor Fusesource
Product jansi
Weakness CWE-122
Published June 16, 2026
Last update June 16, 2026
View on NVD All CVEs

CVSS base score

4.8/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A heap buffer overflow vulnerability exists in the Jansi JNI "ioctl()" wrapper due to a lack of size verification for the argument array before the system call. This can lead to heap corruption and application crashes (DoS). All versions are believed to be vulnerable. This project is unmaintained at the time of CVE assignment.

Key dates

02Disclosure timeline

June 16, 2026 CVE published
June 16, 2026 Record updated