PT-2026-49657 · Fusesource · Jansi

Marcin Wyczechowski + 1 · Published 2026-06-16 · Updated 2026-06-16 · CVE-2026-8484

Positive Technologies (AI Summary)

CVSS v4.0

4.8

Medium

Base vector

AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Jansi JNI (affected versions not specified)

Description A heap buffer overflow occurs in the Jansi JNI ioctl() wrapper because the system fails to verify the size of the argument array before the system call. This flaw can result in heap corruption and application crashes, leading to a Denial of Service (DoS), which is a condition where a service becomes unavailable to its intended users.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

CVE-2026-8484

Affected Products

Jansi

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-8484 · Security Note
• https://github.com/fusesource/jansi/tree/master · Note
• https://cert.pl/en/posts/2026/06/CVE-2026-8484 · Note
• https://twitter.com/f1tym1/status/2066834190348296233 · Twitter Post