CVE-2026-116590 snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWrite

snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. Prior to 1.1.10.9, Snappy.arrayCopyObject src, int offset, int byteLength, Object dest, int destOffset passes caller-supplied ranges to native memcpy without validating either array, allowing negativ...