PT-2026-25910

Name of the Vulnerable Software and Affected Versions lz4 flex versions 0.11.5 and below and 0.12.0 Description lz4 flex, a Rust implementation of LZ4 compression/decompression, contains a flaw where decompressing invalid LZ4 data can lead to information disclosure. Specifically, the library does...

zstd:block_decompress: Heap-buffer-overflow in ZSTD_copy16

Project: https://github.com/facebook/zstd.git Detailed Report: https://oss-fuzz.com/testcase?key=5738666286120960 Project: zstd Fuzzing Engine: libFuzzer Fuzz Target: blockdecompress Job Type: libfuzzerasanzstd Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash Address:...