CVE-2026-85228 - Integer overflow in tensor buffer validation in Deep Java Library

CVE-2026-85228 - Integer overflow in tensor buffer validation in Deep Java Library

Bulletin ID: 2026-106-AWS
Scope: AWS
Content Type: Important (requires attention)
Publication Date: 09/10/2026 10:30 AM PDT

Deep Java Library (DJL) is an open-source, engine-agnostic Java framework for deep learning, developed and maintained by Amazon. AWS identified CVE-2026-85228, an integer overflow in the tensor buffer validation component of DJL on all platforms. A crafted tensor payload declaring a shape whose computed byte size exceeds the 32-bit signed integer range causes the size to wrap, allowing an undersized buffer to pass validation; a subsequent tensor operation then reads out of bounds. If leveraged, a remote, unauthenticated actor could obtain information from adjacent process memory or cause a denial of service. A fix for this issue has been released and we recommend users of DJL upgrade to version 0.37.0 or later.

Impacted versions: >=0.13.0 AND <=0.36.0

This issue has been addressed in ai.djl:api version 0.37.0. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes.

There is no workaround other than upgrading. Until you can upgrade, only accept tensor input from trusted sources and avoid exposing raw-tensor ("binary mode") inference endpoints backed by native Java engines to untrusted callers.

We would like to thank Oguzhan Akkaya for collaborating on this issue through the coordinated vulnerability disclosure process.