EUVD-2026-82603

snappy-java: Heap buffer overflow in Snappy.uncompressArray typed-array methods...

GHSA-GWQ9-9FFJ-MVRV snappy-java: Heap buffer overflow in Snappy.uncompress*Array typed-array methods

Impact Snappy.uncompressCharArray, uncompressShortArray, uncompressIntArray, uncompressLongArray, uncompressFloatArray and uncompressDoubleArray sized the result array by dividing the declared uncompressed byte length by the element size, but native code wrote the full byte length. If the declare...

snappy-java: Heap buffer overflow in Snappy.uncompress*Array typed-array methods

Impact Snappy.uncompressCharArray, uncompressShortArray, uncompressIntArray, uncompressLongArray, uncompressFloatArray and uncompressDoubleArray sized the result array by dividing the declared uncompressed byte length by the element size, but native code wrote the full byte length. If the declare...

CVE-2026-93451

A flaw was found in snappy-java. A buffer overflow vulnerability exists in the Snappy.uncompressArray methods. This flaw occurs because the methods incorrectly calculate the output array size, passing an undivided length to native code. A remote attacker, by providing specially crafted compressed...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write through the Snappy.uncompressArray methods. An attacker can corrupt heap memory and potentially cause application crashes or unexpected behavior by supplying specially crafted compressed input that results in...

GHSA-WM36-87W8-WG22 Duplicate Advisory: snappy-java: Heap buffer overflow in Snappy.uncompress*Array typed-array methods

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-gwq9-9ffj-mvrv This link is maintained to preserve external references. Original Description snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in typed Snappy.uncompressArray methods that...

Duplicate Advisory: snappy-java: Heap buffer overflow in Snappy.uncompress*Array typed-array methods

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-gwq9-9ffj-mvrv This link is maintained to preserve external references. Original Description snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in typed Snappy.uncompressArray methods that...

CVE-2026-93451

snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in typed Snappy.uncompressArray methods that allocate output arrays by dividing uncompressed length by element size but pass the undivided length to native code. Attackers controlling compressed input can cause misaligned lengt...

CVE-2026-93451: Out-of-bounds Write

snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in typed Snappy.uncompressArray methods that allocate output arrays by dividing uncompressed length by element size but pass the undivided length to native code. Attackers controlling compressed input can cause misaligned lengt...

CVE-2026-93451

snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in typed Snappy.uncompressArray methods that allocate output arrays by dividing uncompressed length by element size but pass the undivided length to native code. Attackers controlling compressed input can cause misaligned lengt...

PT-2026-95188

Name of the Vulnerable Software and Affected Versions snappy-java versions prior to 1.1.10.9 Description A buffer overflow exists in typed Snappy.uncompressArray methods. The issue occurs because output arrays are allocated by dividing the uncompressed length by the element size, but the undivide...