CoreCVE
Back

MEDIUM

Heap buffer overflow in Jansi

Published Jun 16, 2026

Description

A heap buffer overflow vulnerability exists in the Jansi JNI "ioctl()" wrapper due to a lack of size verification for the argument array before the system call. This can lead to heap corruption and application crashes (DoS). All versions are believed to be vulnerable. This project is unmaintained at the time of CVE assignment.

Affected products

Remediation

Red Hat statement

This Moderate vulnerability in Jansi's JNI `ioctl()` wrapper can lead to a denial of service due to a heap buffer overflow. Exploitation requires local access and user interaction, as the flaw stems from insufficient size verification of the argument array before a system call, potentially causing application instability. The unmaintained status of the Jansi project increases the risk associated with this flaw.

Red Hat mitigation

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

Weaknesses (2)

CWE-122

CWE-1284

References (6)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner CERT-PL
Published Jun 16, 2026
Updated Jun 16, 2026
Reserved May 13, 2026
Link CVE-2026-8484
CISA Vulnrichment
Updated Jun 16, 2026
NVD
Status Deferred
Modified Jun 17, 2026
Link CVE-2026-8484
Red Hat
Severity Moderate
Public date Jun 16, 2026
Links CVE-2026-8484 - Bugzilla