CVE-2026-14685 PUBLISHED

HdrHistogram AbstractHistogram AbstractHistogram.java recordValueWithCount state issue

Assigner: VulDB
Reserved: 04.07.2026 Published: 04.07.2026 Updated: 04.07.2026

A vulnerability has been found in HdrHistogram up to 2.2.2. This vulnerability affects the function recordValueWithCount of the file src/main/java/org/HdrHistogram/AbstractHistogram.java of the component AbstractHistogram. Such manipulation of the argument Count leads to state issue. The attack can only be performed from a local environment. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Metrics

CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
CVSS Score: 4.8

Product Status

Vendor n/a
Product HdrHistogram
Versions
  • Version 2.2.0 is affected
  • Version 2.2.1 is affected
  • Version 2.2.2 is affected

Credits

  • sara11h (VulDB User) reporter
  • VulDB CNA Team coordinator

References

Problem Types

  • State Issue CWE