Lucene search

K
osvGoogleOSV:GO-2020-0022
HistoryApr 14, 2021 - 8:04 p.m.

Out-of-bounds write in github.com/cloudflare/golz4

2021-04-1420:04:52
Google
osv.dev
12

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

62.0%

LZ4 bindings use a deprecated C API that is vulnerable to memory corruption, which could lead to arbitrary code execution if called with untrusted user input.

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

62.0%