CLEANSTART-2026-FN33770 Xerial snappy-java from 1

Security vulnerability affects the solr package. Xerial snappy-java from 1...

CLEANSTART-2026-OU24429 snappy-java through 1

Security vulnerability affects the solr package. snappy-java through 1...

CLEANSTART-2026-BS90242 Xerial snappy-java before 1

Security vulnerability affects the solr package. Xerial snappy-java before 1...

CLEANSTART-2026-DF81862 snappy-java through 1

Security vulnerability affects the solr package. snappy-java through 1...

CLEANSTART-2026-ZO24294 snappy-java through 1

Security vulnerability affects the solr package. snappy-java through 1...

Astra Linux – Vulnerability in snappy-java

Snappy-Java is a Java port of the snappy, a fast C++ compressor/decompressor developed by Google. It was found that the SnappyInputStream is vulnerable to Denial of Service DoS attacks when decompressing data with a too large chunk size. Due to a lack of a upper bound check on the chunk length, a...

Security Bulletin: Multiple vulnerabilities in IBM Tivoli Network Manager IP Edition

Summary Multiple vulnerabilities were addressed in IBM Tivoli Network Manager IP Edition 4.2.0.25 IF1 Vulnerability Details CVEID:CVE-2026-108104 DESCRIPTION: Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled...

CLEANSTART-2026-MH58992 snappy-java through 1

Security vulnerability affects the elasticsearch package. snappy-java through 1...

CLEANSTART-2026-RU43979 snappy-java through 1

Security vulnerability affects the elasticsearch package. snappy-java through 1...

CLEANSTART-2026-GD87503 snappy-java through 1

Security vulnerability affects the elasticsearch package. snappy-java through 1...

CLEANSTART-2026-VP40557 snappy-java through 1

Security vulnerability affects the solr package. snappy-java through 1...

CLEANSTART-2026-XV24797 snappy-java through 1

Security vulnerability affects the solr package. snappy-java through 1...

CLEANSTART-2026-UM59263 snappy-java through 1

Security vulnerability affects the solr package. snappy-java through 1...

CVE-2026-108104

A flaw was found in snappy-java. A remote attacker can cause information disclosure or data corruption by supplying framed data with an excessively large chunk length. This input triggers an out-of-memory condition during buffer reallocation in SnappyFramedInputStream, causing pooled memory buffe...

Linux Distros Unpatched Vulnerability : CVE-2026-108104

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled buffers twice when...

Linux Distros Unpatched Vulnerability : CVE-2026-108106

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows attackers to exhaust JVM memory by declaring a large...

CVE-2026-108106

A flaw was found in snappy-java. A remote attacker can exploit this unbounded memory allocation vulnerability by providing crafted compressed input with an excessively large declared uncompressed size during decompression. Successful exploitation allows the attacker to exhaust available system...

Double Free

Overview Affected versions of this package are vulnerable to Double Free via SnappyFramedInputStream in src/main/java/org/xerial/snappy/SnappyFramedInputStream.java. An attacker can make two SnappyFramedInputStream instances share the same backing array by supplying framed data with a large...

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value through the Snappy.uncompressedLength and decompression paths in Snappy.java and SnappyFramedInputStream. An attacker can exhaust JVM memory by supplying a crafted compressed payload that...

DEBIAN-CVE-2026-108104

Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled buffers twice when replacement allocation fails. Attackers can supply framed data with a large declared chunk length to trigger OutOfMemoryError, causing shared...