CVE-2026-14683 | HdrHistogram up to 2.2.2 AbstractHistogram.java lengthOfCompressedContents memory allocation (Issue 219)

A vulnerability classified as problematic was found in HdrHistogram up to 2.2.2. Affected by this issue is the function org.HdrHistogram.AbstractHistogram.decodeFromCompressedByteBuffer of the file src/main/java/org/HdrHistogram/AbstractHistogram.java. The manipulation of the argument lengthOfCompressedContents results in uncontrolled memory allocation.

This vulnerability was named CVE-2026-14683. The attack needs to be approached locally. In addition, an exploit is available.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More