CVE-2024-36124 iq80 Snappy has an out-of-bounds read when uncompressing data, leading to JVM crash

🗓️ 03 Jun 2024 14:25:58Reported by GitHub_MType

CVE-2024-36124 iq80 Snappy out-of-bounds read leading to JVM cras

Reporter	Title	Published	Views	Family All 29
IBM Security Bulletins	Security Bulletin: Vulnerabilities in MongoDB, Python, Node.js, Golang Go, Linux kernel affect IBM Spectrum Protect Plus	10 Mar 202620:52	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability with Perl, Snappy, Psf Request, spring-web-5.3.33.jar , Apache HTTP Server, OpenJDK, affect IBM Cloud Object Storage Systems (July 2024v1)	12 Jul 202415:44	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability with The Bouncy Castle Crypto affect IBM Cloud Object Storage Systems (July 2024v2)	17 Jul 202415:21	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for December 2025.	12 Jan 202617:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Automation Decision Services for Jan 2026- Multiple CVEs addressed	25 Feb 202604:42	–	ibm
IBM Security Bulletins	Security Bulletin: Snappy is a compression/decompression library which affects watsonx.data	10 Mar 202518:10	–	ibm
IBM Security Bulletins	Security Bulletin: The B2B API of IBM Sterling B2B Integrator is Vulnerable to Denial of Service due to Snappy (CVE-2024-36124)	30 Jan 202515:11	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Snappy, OpenSSL and cURL libcurl might affect IBM Storage Copy Data Management.	24 Jan 202519:13	–	ibm
IBM Security Bulletins	Security Bulletin: Denial of service, directory traversal, and other vulnerabilities might affect IBM Storage Defender – Resiliency Service	15 Apr 202502:50	–	ibm
Chainguard	CVE-2024-36124 vulnerabilities	3 Jun 202415:15	–	cgr

[
  {
    "vendor": "dain",
    "product": "snappy",
    "versions": [
      {
        "version": "< 0.5",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/dain/snappy/security/advisories/GHSA-8wh2-6qhj-h7j9

03 Jun 2024 14:25Current

5.2Medium risk

Vulners AI Score5.2

CVSS 3.15.3

EPSS0.00237

CWE-125