35 matches found
lz4-java: lz4-java: Out-of-bounds memory operations lead to denial of service and information disclosure
A flaw was found in lz4-java. This vulnerability allows remote attackers to cause denial of service DoS and read adjacent memory via untrusted compressed input. This vulnerability affects only programs using the unsafe LZ4decompressfast API, known as the "fast" decompressor...
The vulnerability of the LZ4_decompress_fast() function in the lz4-java data compression library allows a hacker to cause a service failure and disclose confidential information.
The vulnerability of the LZ4decompressfast function in the lz4-java data compression library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions and expose sensitive information...
PT-2025-48936
Уязвимость функции LZ4 decompress fast библиотеки для сжатия данных lz4-java связана с чтением за границами буфера в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании и раскрыть защищаемую информацию...
EUVD-2017-16747
Malware in sbrugna...
EUVD-2017-16748
Malware in sbrugna...
PT-2024-29851
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.10.0-rc7+ Description The issue is related to a race condition in the z erofs get gbuf function, where the current task may be migrated to another CPU between z erofs gbuf id and spin lock&gbuf-lock, triggering...
SUSE CVE-2017-7772
Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function...
PT-2022-29623
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue is related to a read out of bounds error in the LZ4 decompress safe partial function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2022-29278
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue is related to a read out of bounds error in the LZ4 decompress safe partial function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2022-29950
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue is related to a read out of bounds error in the LZ4 decompress safe partial function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2022-30246
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.111 Description The issue is related to a read out of bounds error in the LZ4 decompress safe partial function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2022-36940
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read crash. Technical details include the involvement of LZ4 decompress safe, blosc d, and do job functions...
CVE-2017-7773
Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor...
CVE-2017-7773
Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor...
Heap overflow
Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor...
CVE-2017-7773
CVE-2017-7773 is a Graphite2 heap-based buffer overflow in the lz4::decompress implementation (src/Decompressor) that affects Firefox prior to 54. The issue can cause a crash and, per advisories, may allow arbitrary code execution under certain conditions. Affected products are those using Graphi...
CVE-2017-7773
Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor...
CVE-2017-7773
Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor...