Medium
jansi — security advisory
A heap buffer overflow vulnerability exists in the Jansi JNI "ioctl()" wrapper due to a lack of size verification for the argument array before the system call. This can lead to heap corruption and application crashes (DoS). All versions are believed to be vulnerable. This project is unmaintained at the time of CVE assignment.
- Products
- jansi
- Affected versions
- 1.16-1, 1.18-1, 1.4-3, 2.4.0-2, 2.4.1-2, 2.4.1-2build1, 2.4.2-1
- Fixed versions
- Not specified
- CVEs
- CVE-2026-8484
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 03:23 UTC · Revision 1
Source evidence
A heap buffer overflow vulnerability exists in the Jansi JNI "ioctl()" wrapper due to a lack of size verification for the argument array before the system call. This can lead to heap corruption and application crashes (DoS). All versions are believed to be vulnerable. This project is unmaintained at the time of CVE assignment.
osv:UBUNTU-CVE-2026-8484
jansi
Fixed versions: Not specified
jansi
Fixed versions: Not specified
jansi
Fixed versions: Not specified
jansi
Fixed versions: Not specified
jansi
Fixed versions: Not specified
jansi
Fixed versions: Not specified
jansi
Fixed versions: Not specified
jansi
Fixed versions: Not specified
jansi
Fixed versions: Not specified
Complete source record
{
"id": "1ecdf8c8a92c3dd3bc04e560857d18b01fd1a26ebf7b0a71c5f95ed620bd221f",
"url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-8484",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "UBUNTU-CVE-2026-8484",
"summary": "A heap buffer overflow vulnerability exists in the Jansi JNI \"ioctl()\" wrapper due to a lack of size verification for the argument array before the system call. This can lead to heap corruption and application crashes (DoS). All versions are believed to be vulnerable. This project is unmaintained at the time of CVE assignment.",
"evidence": "osv:UBUNTU-CVE-2026-8484",
"products": [
{
"name": {
"value": "jansi",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.4-3",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "jansi",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.4-3",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "jansi",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.16-1",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "jansi",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.18-1",
"evidence": "/affected/3/versions"
}
]
},
{
"name": {
"value": "jansi",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.18-1",
"evidence": "/affected/4/versions"
}
]
},
{
"name": {
"value": "jansi",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.4.0-2",
"evidence": "/affected/5/versions"
},
{
"value": "2.4.1-2",
"evidence": "/affected/5/versions"
}
]
},
{
"name": {
"value": "jansi",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.4.1-2",
"evidence": "/affected/6/versions"
}
]
},
{
"name": {
"value": "jansi",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.4.2-1",
"evidence": "/affected/7/versions"
}
]
},
{
"name": {
"value": "jansi",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.4.1-2",
"evidence": "/affected/8/versions"
},
{
"value": "2.4.1-2build1",
"evidence": "/affected/8/versions"
},
{
"value": "2.4.2-1",
"evidence": "/affected/8/versions"
}
]
}
],
"severity": "medium",
"structured": {
"id": "UBUNTU-CVE-2026-8484",
"aliases": [
"UBUNTU-CVE-2026-8484"
],
"metrics": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "jansi",
"purl": "pkg:deb/ubuntu/jansi?arch=source&distro=trusty",
"ecosystem": "Ubuntu:14.04:LTS"
},
"versions": [
"1.4-3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-8484.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libjansi-java",
"binary_version": "1.4-3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "jansi",
"purl": "pkg:deb/ubuntu/jansi?arch=source&distro=xenial",
"ecosystem": "Ubuntu:16.04:LTS"
},
"versions": [
"1.4-3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-8484.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libjansi-java",
"binary_version": "1.4-3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "jansi",
"purl": "pkg:deb/ubuntu/jansi?arch=source&distro=bionic",
"ecosystem": "Ubuntu:18.04:LTS"
},
"versions": [
"1.16-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-8484.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libjansi-java",
"binary_version": "1.16-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "jansi",
"purl": "pkg:deb/ubuntu/jansi?arch=source&distro=focal",
"ecosystem": "Ubuntu:20.04:LTS"
},
"versions": [
"1.18-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-8484.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libjansi-java",
"binary_version": "1.18-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "jansi",
"purl": "pkg:deb/ubuntu/jansi?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"1.18-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-8484.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libjansi-java",
"binary_version": "1.18-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "jansi",
"purl": "pkg:deb/ubuntu/jansi?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"2.4.0-2",
"2.4.1-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-8484.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libjansi-java",
"binary_version": "2.4.1-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "jansi",
"purl": "pkg:deb/ubuntu/jansi?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"2.4.1-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-8484.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libjansi-java",
"binary_version": "2.4.1-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "jansi",
"purl": "pkg:deb/ubuntu/jansi?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"2.4.2-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-8484.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libjansi-java",
"binary_version": "2.4.2-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "jansi",
"purl": "pkg:deb/ubuntu/jansi?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"2.4.1-2",
"2.4.1-2build1",
"2.4.2-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-8484.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libjansi-java",
"binary_version": "2.4.2-1"
}
]
}
}
],
"modified": "2026-10-17T13:01:12.875367422Z",
"provider": "osv",
"upstream": [
"CVE-2026-8484"
],
"references": [
"https://ubuntu.com/security/CVE-2026-8484",
"https://www.cve.org/CVERecord?id=CVE-2026-8484"
]
},
"related_cves": [
{
"value": "CVE-2026-8484",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 361261,
"published_at": "2026-06-16T12:16:00+00:00"
}