662 matches found
compress zstd: Panic on two-block frames
Summary A crafted 27 KB two-block zstd frame makes DecodeAll and the streaming decoder panic with an out-of-range slice index instead of returning a decode error. The same bytes decode fine with the reference zstd. Any program that decompresses untrusted zstd input can be crashed by it. Reproduce...
EUVD-2026-110497
compress zstd: Panic on two-block frames...
GHSA-FPMH-FRQ8-7RJ8 compress zstd: Panic on two-block frames
Summary A crafted 27 KB two-block zstd frame makes DecodeAll and the streaming decoder panic with an out-of-range slice index instead of returning a decode error. The same bytes decode fine with the reference zstd. Any program that decompresses untrusted zstd input can be crashed by it. Reproduce...
CVE-2026-116591
compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can panic when a crafted two-block frame reaches huff0.ReadTable with an FSE normalized count of 32768 that readNCount stores in int16 as -32768. The wrapped count allows buildDtable ...
UBUNTU-CVE-2026-116591
compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can panic when a crafted two-block frame reaches huff0.ReadTable with an FSE normalized count of 32768 that readNCount stores in int16 as -32768. The wrapped count allows buildDtable ...
CVE-2026-116591
compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can panic when a crafted two-block frame reaches huff0.ReadTable with an FSE normalized count of 32768 that readNCount stores in int16 as -32768. The wrapped count allows buildDtable ...
CVE-2026-116591 compress zstd: Panic on two-block frames
compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can panic when a crafted two-block frame reaches huff0.ReadTable with an FSE normalized count of 32768 that readNCount stores in int16 as -32768. The wrapped count allows buildDtable ...
CVE-2026-116591 compress zstd: Panic on two-block frames
compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can panic when a crafted two-block frame reaches huff0.ReadTable with an FSE normalized count of 32768 that readNCount stores in int16 as -32768. The wrapped count allows buildDtable ...
CVE-2026-116591
compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can panic when a crafted two-block frame reaches huff0.ReadTable with an FSE normalized count of 32768 that readNCount stores in int16 as -32768. The wrapped count allows buildDtable ...
CVE-2026-116591 compress zstd: Panic on two-block frames
compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can panic when a crafted two-block frame reaches huff0.ReadTable with an FSE normalized count of 32768 that readNCount stores in int16 as -32768. The wrapped count allows buildDtable ...
CVE-2026-116591
The compress library (prior to version 1.20.2 ) is vulnerable to a denial-of-service condition where the zstd DecodeAll and streaming decoder paths can panic . The root cause is an integer overflow where a crafted two-block frame provides an FSE normalized count of 32768, which readNCount stores ...
Security Bulletin:Vulnerability in zstd-jni may affect IBM Infosphere Change Data Capture (CVE-2026-90852)
Summary A security vulnerability has been identified in zstd-jni, JNI bindings for Zstd native library. zstd-jni is used by IBM Infosphere Change Data Capture. IBM has addressed this vulnerability. Refer to the "Remediation/Fixes" section below for remediation details. Vulnerability Details...
Security Bulletin:Multiple vulnerabilities in zstd-jni may affect IBM Infosphere Change Data Capture (CVE-2026-89045, CVE-2026-89046, CVE-2026-90560)
Summary Multiple security vulnerabilities have been identified in zstd-jni, JNI bindings for Zstd native library. zstd-jni is used by IBM Infosphere Change Data Capture. IBM has addressed these vulnerabilities. Refer to the "Remediation/Fixes" section below for remediation details. Vulnerability...
PT-2026-125471
Summary A crafted 27 KB two-block zstd frame makes DecodeAll and the streaming decoder panic with an out-of-range slice index instead of returning a decode error. The same bytes decode fine with the reference zstd. Any program that decompresses untrusted zstd input can be crashed by it. Reproduce...
CLEANSTART-2026-WJ34335 zstd-jni versions 1
Security vulnerability affects the wildfly package. zstd-jni versions 1...
CLEANSTART-2026-OP88753 zstd-jni versions 1
Security vulnerability affects the wildfly package. zstd-jni versions 1...
CLEANSTART-2026-TJ31948 zstd-jni versions 1
Security vulnerability affects the wildfly package. zstd-jni versions 1...
CLEANSTART-2026-MU11707 zstd-jni before 1
Security vulnerability affects the wildfly package. zstd-jni before 1...