EUVD-2026-117082

CESNET ipfixcol2 2.7.1 before 2.9.0 contains a heap-based buffer overflow in Lz4Decoder.cpp that allows unauthenticated network peers to write past heap buffers. Attackers can declare a small ring buffersize followed by a large decompressedsize to write up to 65535 controlled bytes and crash the...

CVE-2026-122127

The CESNET ipfixcol2 software, versions 2.7.1 before 2.9.0 , is vulnerable to a heap-based buffer overflow within the Lz4Decoder.cpp component. The root cause allows unauthenticated network peers to provide a small ring buffer_size followed by a large decompressed_size, enabling them to write up ...