Search: CVE-2026-87877

CVE-2026-87877 is a use-after-free vulnerability in the luben zstd-jni library affecting versions from 1.3.8-4 up to but not including 1.5.7-14. The flaw arises because certain stream class methods do not validate the closed state before operating, allowing attackers to invoke these methods on closed streams. This can lead to writing through freed native pointers, potentially corrupting unrelated objects or causing the Java Virtual Machine (JVM) to crash. The vulnerability has a high severity score of 7.0 and does not currently have known exploits in the wild.