Search: CVE-2026-89046

An out-of-bounds read vulnerability exists in zstd-jni versions 1.5.5-6 through 1.5.7-13 in the Zstd.getFrameContentSize method. The flaw occurs because negative srcPosition arguments are not properly validated, allowing attackers to bypass bounds checks and cause out-of-bounds memory reads. This can lead to information disclosure or JVM crashes.