CVE-2026-14683

A flaw was found in HdrHistogram. A local attacker can exploit a vulnerability in the decodeFromCompressedByteBuffer function by manipulating the lengthOfCompressedContents argument. This manipulation leads to uncontrolled memory allocation, which can result in a Denial of Service (DoS) condition, making the affected system unavailable.

Low impact. A local attacker can exploit a flaw in HdrHistogram's decodeFromCompressedByteBuffer function by manipulating input, leading to uncontrolled memory allocation and a denial of service. This issue requires local access and results in resource exhaustion, not arbitrary code execution or data compromise.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.