CVE-2023-28638

creationtimestamp| type| source ---|---|--- 2023-03-28 00:38:11+00:00| seen| Telegram/LFqF2cYQedpVGFHFEbDFi3cF2cB2PCUxDZOKzPQqUzhwZq4...

CVE-2023-28638 Stack references to locations outside buffers may become invalid if they exist during a GC compaction in Snappier

Snappier is a high performance C implementation of the Snappy compression algorithm. This is a buffer overrun vulnerability that can affect any user of Snappier 1.1.0. In this release, much of the code was rewritten to use byte references rather than pointers to pinned buffers. This change...