| Title | LatencyUtils 2.0.3 PauseDetector DOS |
|---|
| Description | LatencyUtils uses a background thread to detect system pauses (like GC stalls) and correct latency measurements for coordinated omission. When a detected pause exceeds the configured maximum (highestTrackableLatency), the underlying HdrHistogram library throws an ArrayIndexOutOfBoundsException. Because this exception is unhandled by the background thread, the thread crashes permanently, causing LatencyUtils to stop detecting all future pauses and effectively disabling its core functionality. |
|---|
| Source | ⚠️ https://github.com/LatencyUtils/LatencyUtils/issues/22 |
|---|
| User | Yu Bao from PayPal Cyber Security Team (UID 99838) |
|---|
| Submission | 07/16/2026 05:54 (2 months ago) |
|---|
| Moderation | 08/30/2026 08:25 (2 months later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 397091 [LatencyUtils up to 2.0.3 PauseDetector LatencyStats.java LatencyStats.recordDetectedPause memory corruption] |
|---|
| Points | 20 |
|---|