CVE-2026-122129

The CESNET ipfixcol2 software (versions 2.7.1 before 2.9.0) is vulnerable to a memory allocation flaw in the Lz4Decoder::read_start_header() function. An unauthenticated attacker can exploit this by opening TCP connections and sending LZ4 start headers with very large buffer sizes. This allows th...

EUVD-2026-117083

CESNET ipfixcol2 2.7.1 before 2.9.0 contains a memory allocation vulnerability in Lz4Decoder::readstartheader that allows unauthenticated attackers to exhaust memory by declaring unbounded ring buffer sizes. Attackers can open TCP connections sending LZ4 start headers with very large buffer sizes...