OSV-2026-539
Security exception in org.apache.lucene.analysis.tokenattributes.CharTermAttributeImpl.clone
Published Apr 7, 2026 · updated Oct 15, 2026
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=499813979
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Apr 7, 2026 · OSV.dev
Detected
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=499813979
Oct 15, 2026 · OSV.dev
Updated
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=499813979
Affected
- OSS-Fuzz lucenereleases/lucene/10.0.0, releases/lucene/10.1.0, releases/lucene/10.2.0