PT-2026-4871 · Google Code · Jsonrpc4J

Titan Team · Published 2026-01-27 · Updated 2026-01-27 · CVE-2026-24802

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:L/AU:Y/R:A/V:D/RE:M/U:Amber

Name of the Vulnerable Software and Affected Versions jsonrpc4j versions through 1.6.0

Description An issue exists in jsonrpc4j related to a loop with an unreachable exit condition, potentially leading to an infinite loop. This occurs within the NoCloseOutputStream.Java file in the src/main/java/com/googlecode/jsonrpc4j modules.

Recommendations Update jsonrpc4j to a version later than 1.6.0.

Fix

Infinite Loop

Weakness Enumeration

CWE-835

Related Identifiers

CVE-2026-24802

GHSA-HCX3-3Q5C-R5V6

Affected Products

Jsonrpc4J

References · 7

• https://github.com/briandilley/jsonrpc4j/pull/333 · Patch
• https://osv.dev/vulnerability/GHSA-hcx3-3q5c-r5v6 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-24802 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-24802 · Security Note
• https://github.com/briandilley/jsonrpc4j/commit/087f5268eaf901f90d1e84062def77faa52ad8b2 · Note
• https://github.com/briandilley/jsonrpc4j · Note
• https://twitter.com/CVEnew/status/2016081251090768235 · Twitter Post