572 matches found
PT-2026-25910
Summary Decompressing invalid LZ4 data can leak data from uninitialized memory, or can leak content from previous decompression operations when reusing an output buffer. Details The LZ4 block format defines a "match copy operation" which duplicates previously written data or data from the...
EUVD-2025-201573
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: 6lowpan: reset link-local header on ipv6 recv path Bluetooth 6lowpan.c netdev has headerops, so it must set link-local header for RX skb, otherwise things crash, eg. with AFPACKET SOCKRAW Add missing skbresetmacheader...
GHSA-2XPW-W6GG-JR37 urllib3 streaming API improperly handles highly compressed data
Impact urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP...
The vulnerability of the LZ4_decompress_fast() function in the lz4-java data compression library allows a hacker to cause a service failure and disclose confidential information.
The vulnerability of the LZ4decompressfast function in the lz4-java data compression library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions and expose sensitive information...
SUSE CVE-2025-64332
Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Prior to versions 7.0.13 and 8.0.2, a stack overflow that causes Suricata to crash can occur if SWF decompression is enabled. This issue has been patched in version...
DEBIAN-CVE-2025-64332
Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Prior to versions 7.0.13 and 8.0.2, a stack overflow that causes Suricata to crash can occur if SWF decompression is enabled. This issue has been patched in version...
EUVD-2025-199774
Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Prior to versions 7.0.13 and 8.0.2, a stack overflow that causes Suricata to crash can occur if SWF decompression is enabled. This issue has been patched in version...
CVE-2025-64332 Suricata is vulnerable to a stack overflow on larger compressed data
Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Prior to versions 7.0.13 and 8.0.2, a stack overflow that causes Suricata to crash can occur if SWF decompression is enabled. This issue has been patched in version...
CVE-2025-64332
Suricata versions before 7.0.13 and 8.0.2 are affected by a stack overflow when SWF decompression is enabled, which can cause the engine to crash. The issue has been patched in 7.0.13 and 8.0.2. Affected products: Suricata (IDS/IPS/NSM) by OISF. Root cause: stack overflow during SWF decompression...
TencentOS Server 3: bzip2 (TSSA-2025:0102)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0102 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
EUVD-2025-179156
Malicious code in emulate-tau-grep-resolve-decompress npm...
EUVD-2025-178907
Malicious code in file-decompress-gamma-wind-object npm...
EUVD-2025-179621
Malicious code in compile-xi-small-star-decompress npm...
EUVD-2025-179375
Malicious code in decompress-tree-protected-upsilon-mu npm...
EUVD-2025-177426
Malicious code in optimize-proxy-alpha-cache-decompress npm...
EUVD-2025-179746
Malicious code in chi-iota-decompress-sed-emulate npm...
EUVD-2025-180139
Malicious code in balance-decompress-authorize-query-thread npm...
EUVD-2025-180319
Malicious code in array-public-code-async-decompress npm...