lz4: heap-based buffer overflow in LZ4_write32

LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4write32 related to LZ4compressdestSize, affecting applications that call LZ4compressfast with a large input. This issue can also lead to data corruption. NOTE: the vendor states "only a few specific / uncommon usages of the API are at risk."...

PT-2022-37086

Name of the Vulnerable Software and Affected Versions LZ4 affected versions not specified Description The issue is related to a crash caused by the use of an uninitialized value. Technical details about the crash include the involvement of specific functions: LZ4 compress fast extState fastReset,...

PT-2020-22432

Name of the Vulnerable Software and Affected Versions LZ4 affected versions not specified Description The issue is related to a heap buffer overflow, specifically a WRITE 4 crash type. Technical details about the crash state indicate involvement of the LZ4 write32, LZ4 compress fast extState, and...

DEBIAN-CVE-2019-17543

LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4write32 related to LZ4compressdestSize, affecting applications that call LZ4compressfast with a large input. This issue can also lead to data corruption. NOTE: the vendor states "only a few specific / uncommon usages of the API are at risk."...