An integer overflow in the tensor buffer validation component in Amazon Deep Java Library (DJL) from 0.13.0

Published September 10, 2026 CVE-2026-85228

Amazon Deep Java Library can reveal nearby process memory or make a service unavailable. A remote attacker can trigger the flaw without logging in.

Severity
CriticalCVSS 3.1 · 9.1
Fix
Not confirmedLast checked yesterday
Affected versions
0.13.0 through 0.36.0
Weakness
CWE-190Integer Overflow or Wraparound
Exploit likelihood
0.38% in 30 daysEPSS, higher than 31% of known flaws
Affects
Deep Java Library
Exploited
Not confirmedNo confirmation recorded
CISA SSVC
No known exploitationAutomatable: yes · Technical impact: partial
EU ID
EUVD-2026-75623ENISA vulnerability database

How it works

  • A remote attacker sends numerical data declaring an extremely large shape.
  • DJL calculates a required size beyond the supported 32-bit range.
  • The result wraps into a smaller number.
  • This lets an undersized storage area pass inspection.
  • A later operation reads outside that assigned area.
  • This can reveal nearby process memory or deny service.

What to do

If your application uses DJL, check its ai.djl:api dependency version. Compare version 0.13.0 through 0.36.0 against the AWS advisory. Check whether the application accepts tensor data from untrusted remote callers.

Update ai.djl:api to version 0.37.0 or later. Patch any forked or derivative code with the same fixes. Until you can upgrade, accept tensor input only from trusted sources. Avoid exposing raw-tensor inference endpoints using native Java engines to untrusted callers.

Technical details

CVE-2026-85228 affects DJL 0.13.0 through 0.36.0 on all platforms. An oversized declared tensor shape can make the calculated byte count wrap, allowing an undersized storage area to pass validation. A subsequent tensor operation can read beyond that area. This may disclose adjacent process memory or cause denial of service.

AWS fixed ai.djl:api in 0.37.0.

Severity breakdown

  • Attack vector Network Requires network access to the vulnerable service
  • Attack complexity Low Low complexity under the assessed conditions
  • Privileges required None Attacker needs no account or login
  • User interaction None No victim action needed
  • Scope Unchanged Impact stays within the same security authority
  • Confidentiality impact High Sensitive data can be exposed with serious impact
  • Integrity impact None No data tampering
  • Availability impact High The service can stop or suffer serious disruption
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H Open in FIRST.org calculator

References

View Original Source