VulnerabilityPublished 7 Apr 2026Updated 30 Oct 2026

org.apache.lucene.analysis.tokenattributes.CharTermAttributeImpl.clone · Security Exception

Affects luceneSource GCVE Database

Severity

Medium

Rated by Threat Radar

Data as of 30 Oct 2026, 18:04 UTC

What to do

Affected software

Product	Affected	Fixed in
OSS-Fuzzlucene`pkg:generic/lucene`Other threats	Affected releases/lucene/10.0.0 – releases/lucene/10.6.0 >=5d203f8337cb6a2350c1abe5d83e3e103d060645 13 affected builds	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

A security exception crash was reported in the Apache Lucene library within the method org.apache.lucene.analysis.tokenattributes.CharTermAttributeImpl.clone. The issue was identified by OSS-Fuzz and involves a crash state related to cloning token attribute implementations. No specific versions affected or patch information are provided. There is no evidence of exploitation in the wild.

Impact

The impact is a security exception crash within the Lucene library, which could potentially lead to denial of service or instability in applications using the affected code. There is no indication of remote code execution or data compromise. No known exploits are reported in the wild.

Summary

The vulnerability involves a security exception crash occurring in the Apache Lucene library, specifically in the clone method of CharTermAttributeImpl and PackedTokenAttributeImpl classes. This crash was detected by OSS-Fuzz, a continuous fuzzing service, indicating a potential defect in token attribute cloning logic. No further technical details, such as root cause or exploitability, are provided in the available data.

References

bugs.chromium.org/p/oss-fuzz/issues/detail?id=499813979 (opens in a new tab)

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 12 Aug 2026, 16:20 UTC

Technical details

References

Community reviews

Related threats