CVE-2026-119434

A flaw was found in ezstd. An attacker can cause a Denial of Service DoS by providing a specially crafted compressed data frame that declares an excessively large uncompressed size. When decompressing the data using a dictionary, ezstd fails to enforce memory buffer limits, leading to memory...

CVE-2026-119434 Decompression bomb in ezstd:decompress_using_ddict/2 allows BEAM memory exhaustion via unbounded output buffer

Improper Handling of Highly Compressed Data Data Amplification vulnerability in silviucpp ezstd allows an attacker who supplies a zstd frame to ezstd:decompressusingddict/2 to exhaust memory and terminate the Erlang VM via a small frame that declares a very large content size...

EEF-CVE-2026-119434 Decompression bomb in ezstd:decompress_using_ddict/2 allows BEAM memory exhaustion via unbounded output buffer

Summary Improper Handling of Highly Compressed Data Data Amplification vulnerability in silviucpp ezstd allows an attacker who supplies a zstd frame to ezstd:decompressusingddict/2 to exhaust memory and terminate the Erlang VM via a small frame that declares a very large content size...

EUVD-2026-117783

Improper Handling of Highly Compressed Data Data Amplification vulnerability in silviucpp ezstd allows an attacker who supplies a zstd frame to ezstd:decompressusingddict/2 to exhaust memory and terminate the Erlang VM via a small frame that declares a very large content size...

CVE-2026-119434

The silviucpp ezstd library (versions 1.0.5 before 1.2.5 ) is vulnerable to a decompression bomb (CWE-409) in the ezstd:decompress_using_ddict/2 function. The root cause is that zstd_nif_decompress_using_ddict in c_src/ezstd_nif.cc retrieves the declared content size via ZSTD_getFrameContentSize ...

GHSA-655F-MP8P-96GV Req vulnerable to unbounded archive/compression extraction triggered by response content-type

Summary Req's default response pipeline auto-decodes archive and compressed bodies based on the server-supplied content-type or URL extension and materialises the full decompressed contents in memory with no size cap. An attacker who controls or can redirect a victim into an HTTP endpoint reached...