Lucene search
K

LZ4 through 1.10.0 allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact when the application processes untrusted LZ4 frames. For example, LZ4F_createCDict_advanced in lib/lz4frame.c mishandles NULL checks.

🗓️ 24 Oct 2025 08:02:42Reported by MicrosoftType 
mscve
 mscve
🔗 msrc.microsoft.com👁 4 Views

LZ4 up to 1.10.0 may crash on untrusted frames; NULL check issues in LZ4F_createCDict_advanced.

Related
Detection
ReporterTitlePublishedViews
Family
Amazon
Low: lz4
10 Nov 202500:00
amazon
Amazon
Low: thunderbird
10 Nov 202500:00
amazon
Amazon
Low: lz4
10 Nov 202500:00
amazon
Amazon
Low: firefox
10 Nov 202500:00
amazon
Amazon
Low: firefox
10 Nov 202500:00
amazon
AlpineLinux
CVE-2025-62813
23 Oct 202500:00
alpinelinux
CBLMariner
CVE-2025-62813 affecting package lz4 for versions less than 1.9.4-2
14 Nov 202522:03
cbl_mariner
CBLMariner
CVE-2025-62813 affecting package lz4 for versions less than 1.9.4-2
10 Nov 202521:36
cbl_mariner
CBLMariner
CVE-2025-62813 affecting package mysql for versions less than 8.0.44-2
14 Nov 202522:03
cbl_mariner
CBLMariner
CVE-2025-62813 affecting package mysql for versions less than 8.0.44-2
10 Nov 202521:36
cbl_mariner
Rows per page
Vulners

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Jan 2026 09:43Current
7High risk
Vulners AI Score7
CVSS 3.15.9
4