These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-87825 is a high-severity vulnerability in the zstd-jni library, which is a Java Native Interface (JNI) wrapper for the zstd compression algorithm. The vulnerability is caused by a use-after-free error in the library's handling of streams and contexts, which can lead to silent data corruption or JVM crashes. The vulnerability has been patched in version 1.5.7-14 of the library.
The CVE-2026-87795 vulnerability in zstd-jni versions before 1.5.7-14 allows out-of-bounds memory reads due to improper validation of offset and length parameters in the ZstdDictCompress constructor. This can lead to JVM crashes when attackers supply untrusted values. The vulnerability is caused by a lack of validation of offset and length parameters, which can lead to out-of-bounds memory reads. Defender [truncated]