CVE-2026-8484CWE-122

Heap buffer overflow in Jansi

Medium · published June 16, 2026

CVSS v4.0
4.8
EPSS
0%
Percentile
7.7
In the wild
Unconfirmed
What it is

A heap buffer overflow vulnerability exists in the Jansi JNI "ioctl()" wrapper due to a lack of size verification for the argument array before the system call. This can lead to heap corruption and application crashes (DoS).

All versions are believed to be vulnerable. This project is unmaintained at the time of CVE assignment.

The record
Technical detail
CVSS v4.0
4.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS
0.00185 · 7.7th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2026-06-16T10:32Z
EPSS history
Timeline
  • 16 JUN 10:32Z
    Heap buffer overflow in Jansi
    cvelistv5