CVE-2026-24802
Unknown Unknown - Not Provided
Infinite Loop Vulnerability in jsonrpc4j NoCloseOutputStream Component

Publication date: 2026-01-27

Last updated on: 2026-01-27

Assigner: Government Technology Agency of Singapore Cyber Security Group (GovTech CSG)

Description
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in briandilley jsonrpc4j (src/main/java/com/googlecode/jsonrpc4j modules). This vulnerability is associated with program files NoCloseOutputStream.Java. This issue affects jsonrpc4j: through 1.6.0.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-01-27
Last Modified
2026-01-27
Generated
2026-06-16
AI Q&A
2026-01-27
EPSS Evaluated
2026-06-15
NVD
CVE-2026-24802
EUVD
EUVD-2026-4796
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
briandilley jsonrpc4j to 1.6.0 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-835 The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Mitigation Strategies

To mitigate this vulnerability, update the jsonrpc4j library to a version later than 1.6.0 where the issue has been fixed. The fix involves applying the patch from pull request #333, which adds robust input validation in the RPC Stream Writer's write method to prevent buffer overflow and related crashes. Ensuring that your application uses this patched version will protect against the vulnerability. [1]

Executive Summary

The vulnerability is an Infinite Loop issue in the jsonrpc4j library, specifically in the NoCloseOutputStream.Java file. It occurs due to a loop with an unreachable exit condition, which can cause the program to hang indefinitely.

Impact Analysis

This vulnerability can cause the affected application to enter an infinite loop, potentially leading to denial of service by making the application unresponsive or consuming excessive resources.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-24802. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart