A vulnerability has been found in luben zstd-jni up to 1.5.7-13. This vulnerability affects the function ZstdCompressCtx.loadDict of the file ZstdCompressCtx.java of the component Dictionary Sharing. Such manipulation leads to use after free. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.5.7-14 is able to resolve this issue. The name of the patch is a560131d7834598afd9cea6b7c107bc88e915936. The affected component should

A use-after-free vulnerability was discovered in luben zstd-jni versions up to 1.5.7-13, affecting the ZstdCompressCtx.loadDict function in ZstdCompressCtx.java within the Dictionary Sharing component. The vulnerability can be exploited remotely, and a public exploit has been disclosed. The flaw allows attackers to manipulate memory through improper handling of dictionary objects after they have been freed. A fix was released in version 1.5.7-14 with patch commit a560131d7834598afd9cea6b7c107bc88e915936. The vendor responded promptly and professionally upon disclosure. Users are strongly advised to upgrade to version 1.5.7-14 or later to mitigate the risk.