CVE-2026-14686— HdrHistogram Range Check DoubleHistogram.java org.HdrHistogram.DoubleHistogram.recordValue comparison
Possible ATT&CK Techniques 1AI
T1059 · Command and Scripting InterpreterAffected Version Matrix 3
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | HdrHistogram | 2.2.0 | affected |
2.2.1 | affected | ||
2.2.2 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-14686
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
HdrHistogram Range Check DoubleHistogram.java org.HdrHistogram.DoubleHistogram.recordValue comparison
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability was found in HdrHistogram up to 2.2.2. This issue affects the function org.HdrHistogram.DoubleHistogram.recordValue of the file src/main/java/org/HdrHistogram/DoubleHistogram.java of the component Range Check. Performing a manipulation results in incorrect comparison. The attack is only possible with local access. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
不充分的比较
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | HdrHistogram | 2.2.0 | cpe:2.3:a:hdrhistogram:hdrhistogram:*:*:*:*:*:*:*:* |
II. Public POCs for CVE-2026-14686
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-14686
请登录查看更多情报信息。
News Coverage for CVE-2026-14686 (1)
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2025-15668
GPAC MP4Box box_code_base.c sgpd_del_entry heap-based overfl - CVE-2025-15667
GPAC MP4Box avc_ext.c gf_isom_nalu_sample_rewrite double fre - CVE-2026-14801
GPAC TeXML File load_text.c txtin_probe_duration divide by z - CVE-2026-14792
Formbricks Survey actions.ts access control - CVE-2026-14790
GPAC Media File write_nhml.c nhmldump_send_frame null pointe
Same weakness: CWE-697
- CVE-2026-10097
ML-KEM-1024 x64 AVX2 incomplete cipher text comparison enabl - CVE-2026-9369
NousResearch hermes-agent CLI web-dashboard web_server.py _d - CVE-2026-35040
fast-jwt: Stateful RegExp (/g or /y) causes non-deterministi - CVE-2026-34574
Parse Server: Session field immutability bypass via falsy-va - CVE-2026-34210
mppx has Stripe charge credential replay via missing idempot
V. Comments for CVE-2026-14686
No comments yet