This vulnerability affects the org.HdrHistogram.DoubleHistogram.recordValue method in HdrHistogram up to version 2.2.2. The flaw is due to an incorrect comparison in the range check logic, allowing a local attacker to manipulate input values leading to incorrect behavior. The vulnerability requires local access and low privileges to exploit. Although the issue was reported early, the project has not issued a fix or official response. The CVSS 4.0 base score is 4.8, reflecting medium severity with local attack vector and low complexity.

The vulnerability may cause incorrect handling of recorded values in the DoubleHistogram component, potentially leading to inaccurate histogram data or application logic errors. Since exploitation requires local access and low privileges, the impact is limited to local users. There is no indication of remote exploitation or privilege escalation. No known exploits in the wild have been reported.

No official fix or patch is currently available for this vulnerability. Users should monitor the vendor's communications for updates. Since the vulnerability requires local access, restricting local user permissions and access may reduce risk. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.