CVE-2026-24802
Unknown Unknown - Not Provided

Infinite Loop Vulnerability in jsonrpc4j NoCloseOutputStream Component

Publication date: 2026-01-27

Last updated on: 2026-01-27

Assigner: Government Technology Agency of Singapore Cyber Security Group (GovTech CSG)

Description
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in briandilley jsonrpc4j (src/main/java/com/googlecode/jsonrpc4j modules). This vulnerability is associated with program files NoCloseOutputStream.Java. This issue affects jsonrpc4j: through 1.6.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-01-27
Last Modified
2026-01-27
Generated
2026-07-06
AI Q&A
2026-01-27
EPSS Evaluated
2026-07-05
NVD
CVE-2026-24802
EUVD
EUVD-2026-4796

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
briandilley jsonrpc4j to 1.6.0 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-835 The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Mitigation Strategies

To mitigate this vulnerability, update the jsonrpc4j library to a version later than 1.6.0 where the issue has been fixed. The fix involves applying the patch from pull request #333, which adds robust input validation in the RPC Stream Writer's write method to prevent buffer overflow and related crashes. Ensuring that your application uses this patched version will protect against the vulnerability. [1]

Executive Summary

The vulnerability is an Infinite Loop issue in the jsonrpc4j library, specifically in the NoCloseOutputStream.Java file. It occurs due to a loop with an unreachable exit condition, which can cause the program to hang indefinitely.

Impact Analysis

This vulnerability can cause the affected application to enter an infinite loop, potentially leading to denial of service by making the application unresponsive or consuming excessive resources.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-24802. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart