Log in Start free

Vulnerability · Published Jun 16, 2026 · Assigned by CERT-PL

CVE-2026-8484Heap buffer overflow in Jansi

Medium 4.8

In plain English

A medium-severity heap buffer overflow in jansi from FuseSource. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities).

Severity (CVSS 4.0)4.8Medium
Exploit odds (30 days)0.1%top 96.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A heap buffer overflow vulnerability exists in the Jansi JNI "ioctl()" wrapper due to a lack of size verification for the argument array before the system call. This can lead to heap corruption and application crashes (DoS). All versions are believed to be vulnerable. This project is unmaintained at the time of CVE assignment.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12jansino fix listedDEBIAN-CVE-2026-8484
Debian:13jansino fix listedDEBIAN-CVE-2026-8484
Debian:14jansino fix listedDEBIAN-CVE-2026-8484
Debian:12jansi-nativeno fix listedDEBIAN-CVE-2026-8484
Debian:13jansi-nativeno fix listedDEBIAN-CVE-2026-8484
Debian:14jansi-nativeno fix listedDEBIAN-CVE-2026-8484
Ubuntu:22.04:LTSjansino fix listedUBUNTU-CVE-2026-8484
Ubuntu:24.04:LTSjansino fix listedUBUNTU-CVE-2026-8484
Ubuntu:25.10jansino fix listedUBUNTU-CVE-2026-8484
Ubuntu:26.04:LTSjansino fix listedUBUNTU-CVE-2026-8484
Ubuntu:26.10jansino fix listedUBUNTU-CVE-2026-8484

Affected products (as reported)

VendorProductVersions
FuseSource jansi 0 – through 2.4.3

Weakness: CWE-122 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

References