PT-2025-48344

CVE-2025-12183

·

Published

2025-11-26

·

Updated

2026-10-15

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions org.lz4:lz4-java versions prior to 1.8.0
Description The software contains flaws related to memory handling. Specifically, out-of-bounds memory operations can occur when processing untrusted compressed input. This can lead to a denial of service and potential reading of adjacent memory.
Recommendations Update to a version newer than 1.8.0.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-125: Out-of-bounds Read
Related identifiers
CVE-2025-12183
BDU:2025-15118
GHSA-VQF4-7M7X-WGFC
CLEANSTART-2026-AO61361
CLEANSTART-2026-FR63847
CLEANSTART-2026-KF94035
CLEANSTART-2026-PT41131
CLEANSTART-2026-QA75834
CLEANSTART-2026-SD29232
CLEANSTART-2026-TF05670
CLEANSTART-2026-UW43752
ECHO-CD33-EC70-D5F2
OPENSUSE-SU-2026:10317-1
RHSA-2026:1870
RHSA-2026:1871
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com