CVE-2026-122129

The CESNET ipfixcol2 software (versions 2.7.1 before 2.9.0) is vulnerable to a memory allocation flaw in the Lz4Decoder::read_start_header() function. An unauthenticated attacker can exploit this by opening TCP connections and sending LZ4 start headers with very large buffer sizes. This allows th...