CVE-2026-8484 PUBLISHED

Heap buffer overflow in Jansi

Assigner: CERT-PL
Reserved: 13.05.2026 Published: 16.06.2026 Updated: 16.06.2026

A heap buffer overflow vulnerability exists in the Jansi JNI "ioctl()" wrapper due to a lack of size verification for the argument array before the system call. This can lead to heap corruption and application crashes (DoS). All versions are believed to be vulnerable. This project is unmaintained at the time of CVE assignment.

Metrics

CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
CVSS Score: 4.8

Product Status

Vendor FuseSource
Product jansi
Versions Default: unknown
  • affected from 0 to 2.4.3 (incl.)

Credits

  • Michał Majchrowicz (AFINE) finder
  • Marcin Wyczechowski (AFINE) finder

References

Problem Types

  • CWE-122 Heap-based Buffer Overflow CWE