CVE-2026-82596: LatencyUtils PauseDetector LatencyStats.java LatencyStats.recordDetectedPause memory corruption
A vulnerability was determined in LatencyUtils up to 2.0.3. Affected by this issue is the function LatencyStats.recordDetectedPause of the file src/main/java/org/LatencyUtils/LatencyStats.java of the component PauseDetector. Executing a manipulation can lead to memory corruption. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
Systems using LatencyUtils versions up to 2.0.3 with the PauseDetector component are affected. Exploitation requires local access and low privileges, so remote-only attackers cannot directly trigger it through the conditions described.
What level of access does an attacker need?
An attacker must be able to execute a local manipulation and must have low-privileged access. No user interaction is required.
Is public exploit information available?
Yes. The exploit has been publicly disclosed and may be used.
Is a fix available from the project?
The provided information does not identify a fixed version. It states that the project was notified through an issue report but had not responded.
What is the impact if exploitation succeeds?
The affected recordDetectedPause function can be manipulated to cause memory corruption. The stated availability impact is low, while no confidentiality or integrity impact is listed.