PT-2026-55741 · Unknown · Hdrhistogram

Sara11H · Published 2026-07-04 · Updated 2026-07-04 · CVE-2026-14683

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions HdrHistogram versions prior to 2.2.3

Description An issue exists in the decodeFromCompressedByteBuffer() function within the org.HdrHistogram.AbstractHistogram class. Local manipulation of the lengthOfCompressedContents argument can lead to uncontrolled memory allocation.

Recommendations Update HdrHistogram to a version newer than 2.2.2. As a temporary mitigation, restrict local access to the decodeFromCompressedByteBuffer() function.

Exploit

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

CWE-789

Related Identifiers

CVE-2026-14683

Affected Products

Hdrhistogram

References · 9

• 🔥 https://github.com/HdrHistogram/HdrHistogram/issues/219 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-14683 · Security Note
• https://vuldb.com/vuln/376279/cti · Note
• https://github.com/HdrHistogram/HdrHistogram · Note
• https://vuldb.com/submit/846752 · Note
• https://vuldb.com/vuln/376279 · Note
• https://vuldb.com/submit/846750 · Note
• https://vuldb.com/cve/CVE-2026-14683 · Note
• https://twitter.com/CVEnew/status/2073557065604423913 · Twitter Post