556 matches found
CVE-2026-116590 snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWrite
snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. Prior to 1.1.10.9, Snappy.arrayCopyObject src, int offset, int byteLength, Object dest, int destOffset passes caller-supplied ranges to native memcpy without validating either array, allowing negativ...
CVE-2026-116590
The snappy-java library (prior to version 1.1.10.9 ) contains a vulnerability where Snappy.arrayCopy fails to validate caller-supplied ranges before passing them to native memcpy . This allows negative or oversized byteLength and offset values to perform out-of-bounds reads or writes, leading to ...
EUVD-2026-110473
snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. Prior to 1.1.10.9, Snappy.arrayCopyObject src, int offset, int byteLength, Object dest, int destOffset passes caller-supplied ranges to native memcpy without validating either array, allowing negativ...
CVE-2026-42154
CVE-2026-42154 CVE-2026-42154 — Prometheus Remote Read Snappy DoS...
CLEANSTART-2026-OU24429 snappy-java through 1
Security vulnerability affects the solr package. snappy-java through 1...
CLEANSTART-2026-FN33770 Xerial snappy-java from 1
Security vulnerability affects the solr package. Xerial snappy-java from 1...
CLEANSTART-2026-BS90242 Xerial snappy-java before 1
Security vulnerability affects the solr package. Xerial snappy-java before 1...
CLEANSTART-2026-DF81862 snappy-java through 1
Security vulnerability affects the solr package. snappy-java through 1...
CLEANSTART-2026-ZO24294 snappy-java through 1
Security vulnerability affects the solr package. snappy-java through 1...
CVE-2026-78066
Resource exhaustion in Apache bRPC version 1.18.0 on all platforms: multiple parsers that accept wire-controlled input bound no limit on the sizes declared by the client or on decompressed output, which attackers can use to drive disproportionate memory use and crash the process. Root Cause: 1 Th...
CVE-2026-78066
Apache bRPC (versions
EUVD-2026-107185
Resource exhaustion in Apache bRPC version 1.18.0 on all platforms: multiple parsers that accept wire-controlled input bound no limit on the sizes declared by the client or on decompressed output, which attackers can use to drive disproportionate memory use and crash the process. Root Cause: 1 Th...
CVE-2026-78066 Apache bRPC: Resource Exhaustion via Unbounded Decompression and Unvalidated Wire-Declared Sizes
Resource exhaustion in Apache bRPC version 1.18.0 on all platforms: multiple parsers that accept wire-controlled input bound no limit on the sizes declared by the client or on decompressed output, which attackers can use to drive disproportionate memory use and crash the process. Root Cause: 1 Th...
PT-2026-120543
Resource exhaustion in Apache bRPC version 1.18.0 on all platforms: multiple parsers that accept wire-controlled input bound no limit on the sizes declared by the client or on decompressed output, which attackers can use to drive disproportionate memory use and crash the process. Root Cause: 1 Th...
Astra Linux – Vulnerability in snappy-java
Snappy-Java is a Java port of the snappy, a fast C++ compressor/decompressor developed by Google. It was found that the SnappyInputStream is vulnerable to Denial of Service DoS attacks when decompressing data with a too large chunk size. Due to a lack of a upper bound check on the chunk length, a...
Security Bulletin: Multiple vulnerabilities in IBM Tivoli Network Manager IP Edition
Summary Multiple vulnerabilities were addressed in IBM Tivoli Network Manager IP Edition 4.2.0.25 IF1 Vulnerability Details CVEID:CVE-2026-108104 DESCRIPTION: Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled...
CLEANSTART-2026-MH58992 snappy-java through 1
Security vulnerability affects the elasticsearch package. snappy-java through 1...
CLEANSTART-2026-RU43979 snappy-java through 1
Security vulnerability affects the elasticsearch package. snappy-java through 1...