CLSA-2026-1777307383 lz4: Fix of CVE-2021-3520

CVE-2021-3520: Fix potential memory corruption with negative memmove size...

CLSA-2023-1695326199 lz4: Fix of CVE-2021-3520

CVE-2021-3520: Fix potential memory corruption with negative memmove size...

CVE-2021-3520

There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling of memmove on a negative size argument, causing an out-of-bounds write and/or a crash. The greatest impact of this flaw is to availability...

LZ4 输入验证错误漏洞

LZ4 is a lossless compression algorithm. LZ4 1:1.9.3-1 suffers from an input validation error vulnerability that stems from potential memory corruption due to an integer overflow bug that causes a memmove parameter to become negative...