VulnerabilityPublished 2 May 2024Updated 14 Oct 2026

com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr · Security Exception

Affects checkstyleSource GCVE Database

Severity

Medium

Rated by Threat Radar

Data as of 26 Oct 2026, 15:55 UTC

What to do

Affected software

Product	Affected	Fixed in
OSS-Fuzzcheckstyle`pkg:generic/checkstyle`Other threats	Affected checkstyle-10.16.0 – checkstyle-14.3.0 >=87cf29c15a33e858c1927df6876c4827fc244cd4 51 affected builds	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

A security exception crash was identified in the Checkstyle tool within the JavaLanguageParser.expr method, reported by OSS-Fuzz. The crash involves UTF-8 encoding operations in the Java base module. This issue is classified as medium severity and affects certain versions of Checkstyle. No CVSS score or detailed impact information is provided.

Impact

The issue causes a security exception crash in Checkstyle, potentially disrupting its normal operation. There is no evidence of active exploitation or additional impact such as code execution or data leakage described in the available data.

Summary

OSS-Fuzz reported a security exception crash in Checkstyle's JavaLanguageParser.expr method. The crash stack trace includes UTF-8 encoding functions from the Java base module, indicating the issue occurs during character encoding processing. The affected versions include those at or after commit 87cf29c15a33e858c1927df6876c4827fc244cd4. No further technical details or exploit information is available.

References

bugs.chromium.org/p/oss-fuzz/issues/detail?id=68380 (opens in a new tab)

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 17 Sep 2026, 22:17 UTC

Technical details

References

Community reviews

Related threats