1 matches found
Uninitialized memory exposed when streaming decompression of a legacy frame fails
When decompression fails inside a legacy zstd v0.4 to v0.7 frame, the bundled zstd library reports the output buffer as fully written although nothing was written. DCtx::decompressstream committed that position even on error, and for a Vec destination this extended the vector's length over...
5.9AI score
SaveExploits0Affected Software1
20