1 matches found
Infinite loop
Overview Affected versions of this package are vulnerable to Infinite loop due to negative length validation in readbyte, int, int in src/main/java/com/github/luben/zstd/ZstdInputStreamNoFinalizer.java. An attacker can spin a caller thread indefinitely by supplying a negative len to read, which...
5.1CVSS5.6AI score0.00124EPSS
SaveExploits0References2
20