CVE-2026-122127

The CESNET ipfixcol2 software, versions 2.7.1 before 2.9.0 , is vulnerable to a heap-based buffer overflow within the Lz4Decoder.cpp component. The root cause allows unauthenticated network peers to provide a small ring buffer_size followed by a large decompressed_size, enabling them to write up ...