Skip to main content
VulnerabilityPublished Updated

com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr · Security Exception

Affects checkstyleSource GCVE Database

0
Severity
Medium

Rated by Threat Radar

Data as of 17 Sep 2026, 22:17 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzcheckstylepkg:generic/checkstyleOther threatsAffected
  • >=cf701591feb2e7b7111956202fd85dc6bee982a5
  • =checkstyle-10.18.0
  • =checkstyle-10.18.1
  • =checkstyle-10.18.2
  • =checkstyle-10.19.0
  • =checkstyle-10.20.0
  • =checkstyle-10.20.1
  • =checkstyle-10.20.2
  • =checkstyle-10.21.0
  • =checkstyle-10.21.1
  • =checkstyle-10.21.2
  • =checkstyle-10.21.3
  • =checkstyle-10.21.4
  • =checkstyle-10.22.0
  • =checkstyle-10.23.0
  • =checkstyle-10.23.1
  • =checkstyle-10.24.0
  • =checkstyle-10.25.0
  • =checkstyle-10.25.1
  • =checkstyle-10.26.0
  • =checkstyle-10.26.1
  • =checkstyle-11.0.0
  • =checkstyle-11.0.1
  • =checkstyle-11.1.0
  • =checkstyle-12.0.0
  • =checkstyle-12.0.1
  • =checkstyle-12.1.0
  • =checkstyle-12.1.1
  • =checkstyle-12.1.2
  • =checkstyle-12.2.0
  • =checkstyle-12.3.0
  • =checkstyle-12.3.1
  • =checkstyle-13.0.0
  • =checkstyle-13.1.0
  • =checkstyle-13.2.0
  • =checkstyle-13.3.0
  • =checkstyle-13.4.0
  • =checkstyle-13.4.1
  • =checkstyle-13.4.2
  • =checkstyle-13.5.0
  • =checkstyle-13.6.0
  • =checkstyle-13.7.0
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

A security exception crash occurs in the Checkstyle JavaLanguageParser component, specifically in the expr method, as reported by OSS-Fuzz. The crash involves Java's HeapCharBuffer initialization and CharBuffer wrapping. No CVSS score is available, but the issue is rated medium severity.

References

Community reviews

Loading reviews…