|
Vulnerabilities
< Back

CVE-2026-8484

Updated on 16 Jun 2026

Severity

4.8 Medium severity

Details

CVSS score
4.8
CVSS vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE ID
Links
NISTCIRCLRHELUbuntu

Overview

About vulnerability

A heap buffer overflow vulnerability exists in the Jansi JNI “ioctl()” wrapper due to a lack of size verification for the argument array before the system call. This can lead to heap corruption and application crashes (DoS). All versions are believed to be vulnerable. This project is unmaintained at the time of CVE assignment.

Details

Affected product:
Apache CXF , Wildfly , activemq , gradle , grails-core , jansi , jline , karaf , kotlin , maven , wildfly
Affected packages:
gradle-platform-jvm @ 6.9.4 (+1158 more)