CVE-2026-14685

Name of the Vulnerable Software and Affected Versions HdrHistogram versions prior to 2.2.3

Description A state issue exists within the AbstractHistogram component. The problem occurs in the recordValueWithCount() function located in the src/main/java/org/HdrHistogram/AbstractHistogram.java file. Manipulation of the Count argument can trigger this issue, though the attack is limited to local environments.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict the use of the recordValueWithCount() function to minimize the risk of exploitation.