Back to vendor advisories
AWS Security BulletinsCVE-2026-85228

CVE-2026-85228 - Integer overflow in tensor buffer validation in Deep Java Library

Severity not listed 1 CVE Published Oct 25, 2026 at 3:13 AM UTC

Summary

Read this article

Products covered

A separate affected-products list was not included in the collected bulletin.

Remediation

A fix for this issue has been released and we recommend users of DJL upgrade to version 0.37.0 or later.

CVEs in this advisory 1

Update history

What changed in later vendor updates

SecurityAlert records field-level changes from the point we begin following a bulletin. Earlier vendor changes may not have a field-by-field record.

    • The vendor changed the advisory summary.

Updates

  1. Added to SecurityAlert

    We collected the advisory from the official source.

  2. Published by AWS

    The publication date reported by the vendor.

  3. Confirmed at the source

    Our collector saw this advisory during a later source check.