CVE Intelligence

Amazon Deep Java Library vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Amazon Deep Java Library: 1 record(s), with affected versions and fixes.

CVE-2026-85228 Critical · 9.1 CWE-190 Sep 10, 2026
Integer overflow in tensor buffer validation in Deep Java Library
An integer overflow in the tensor buffer validation component in Amazon Deep Java Library (DJL) from 0.13.0 through 0.36.0 on all platforms might allow a remote unauthenticated actor to obtain information from adjacent process memory or cause a denial of service via a crafted tensor payload. To remediate this issue, users should upgrade to version 0.37.0 or above.