Buffer Overflow

org.xerial.snappy, snappy-java is vulnerable to a buffer overflow. The vulnerability is due to incorrect output array size calculations in typed Snappy.uncompressArray methods while passing the undivided length to native code, which allows an attacker to provide crafted compressed input to write...