CVE-2026-59949

A flaw was found in lz4-java. Insufficient validation of byte array arguments in its Java Native Interface JNI-based XXHash implementations allows an attacker to crash the Java Virtual Machine JVM by providing invalid input. This can lead to a denial of service, making the affected application...