CVE-2025-12183

Low

Low Medium High Critical

CVSS Score

Published: Nov 28, 2025

Last Modified: Dec 29, 2025

Vulnerability Description

Out-of-bounds memory operations in org.lz4:lz4-java 1.8.0 and earlier allow remote attackers to cause denial of service and read adjacent memory via untrusted compressed input.

Available Security Patches

2 patches available from vendors

View All Patches

Oracle

CPUAPR2026

Oracle Critical Patch Update Advisory - April 2026

Severity

Critical

Released

Apr 21, 2026

Restart Required

Security Update

View Details Vendor Page

Oracle

CPUJAN2026

Oracle Critical Patch Update Advisory - January 2026

Severity

Critical

Released

Jan 20, 2026

Restart Required

Security Update

View Details Vendor Page

Browse All Security Patches

References & Resources

Severity Details

out of 10.0

Low

Weakness Type (CWE)

CWE-125 Top 25 #11

Out-of-bounds Read

Description: The product reads data past the end, or before the beginning, of the intended buffer.
Typical Severity: High
Abstraction Level: Base