CLEANSTART-2026-VT98989 snappy-java through 1

CVE-2026-93451 affects multiple packages. snappy-java through 1. See references for individual vulnerability details...

CLEANSTART-2026-KJ78941 Xerial snappy-java before 1

CVE-2026-108106 affects multiple packages. Xerial snappy-java before 1. See references for individual vulnerability details...

CLEANSTART-2026-WU48672 snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google

CVE-2026-116590 affects multiple packages. snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. See references for individual vulnerability details...

CVE-2026-116590

snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. Prior to 1.1.10.9, Snappy.arrayCopyObject src, int offset, int byteLength, Object dest, int destOffset passes caller-supplied ranges to native memcpy without validating either array, allowing negativ...

CVE-2026-116590

A flaw was found in snappy-java. This vulnerability allows an attacker to cause a Denial of Service DoS by crashing the Java Virtual Machine JVM. The issue occurs because memory copying routines fail to validate array bounds and buffer lengths before passing them to native memory operations. By...

Snappy-java: JVM Crash From Unchecked Ranges In Snappy.arrayCopy And SnappyOutputStream.rawWrite

Impact "Snappy.arrayCopyObject src, int offset, int byteLength, Object dest, int destOffset" called a native "memcpy" without validating the ranges. A negative or oversized "byteLength" or offset read or wrote outside the arrays and crashed the JVM. "SnappyOutputStream.rawWrite" and...

Denial Of Service (DoS)

org.xerial.snappy, snappy-java is vulnerable to denial of serviceDoS. The vulnerability is due to unbounded memory allocation based on the declared uncompressed length in crafted compressed input, which allows an attacker to exhaust JVM memory by triggering allocations of up to 2 GB and causing a...

Buffer Overflow

org.xerial.snappy, snappy-java is vulnerable to a buffer overflow. The vulnerability is due to incorrect output array size calculations in typed Snappy.uncompressArray methods while passing the undivided length to native code, which allows an attacker to provide crafted compressed input to write...

Linux Distros Unpatched Vulnerability : CVE-2026-116590

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. Prior to 1.1.10.9, Snappy.arrayCopyObject src, int offset, int...

snappy-java: Heap buffer overflow in Snappy.uncompress*Array typed-array methods

Impact Snappy.uncompressCharArray, uncompressShortArray, uncompressIntArray, uncompressLongArray, uncompressFloatArray and uncompressDoubleArray sized the result array by dividing the declared uncompressed byte length by the element size, but native code wrote the full byte length. If the declare...

GHSA-GWQ9-9FFJ-MVRV snappy-java: Heap buffer overflow in Snappy.uncompress*Array typed-array methods

Impact Snappy.uncompressCharArray, uncompressShortArray, uncompressIntArray, uncompressLongArray, uncompressFloatArray and uncompressDoubleArray sized the result array by dividing the declared uncompressed byte length by the element size, but native code wrote the full byte length. If the declare...

EUVD-2026-82603

snappy-java: Heap buffer overflow in Snappy.uncompressArray typed-array methods...

snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWrite

Impact Snappy.arrayCopyObject src, int offset, int byteLength, Object dest, int destOffset called a native memcpy without validating the ranges. A negative or oversized byteLength or offset read or wrote outside the arrays and crashed the JVM. SnappyOutputStream.rawWrite and...

GHSA-XQRX-QH46-34M7 snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWrite

Impact Snappy.arrayCopyObject src, int offset, int byteLength, Object dest, int destOffset called a native memcpy without validating the ranges. A negative or oversized byteLength or offset read or wrote outside the arrays and crashed the JVM. SnappyOutputStream.rawWrite and...

EUVD-2026-110473

snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWrite...

EUVD-2026-95807

snappy-java: Unbounded memory allocation from attacker-declared uncompressed lengtha...

GHSA-Q233-G92Q-QXP6 snappy-java: Unbounded memory allocation from attacker-declared uncompressed lengtha

Impact Several decompression paths in snappy-java allocate an output buffer sized by the uncompressed length declared in the first bytes of the compressed data, before decompressing or validating it. A few bytes of crafted input can therefore force an allocation of up to 2 GB, causing...

snappy-java: Unbounded memory allocation from attacker-declared uncompressed lengtha

Impact Several decompression paths in snappy-java allocate an output buffer sized by the uncompressed length declared in the first bytes of the compressed data, before decompressing or validating it. A few bytes of crafted input can therefore force an allocation of up to 2 GB, causing...

Improper Validation of Array Index

Overview Affected versions of this package are vulnerable to Improper Validation of Array Index via the Snappy.arrayCopy and SnappyOutputStream.rawWrite functions. An attacker can cause the JVM to crash or trigger out-of-bounds memory access by supplying negative or oversized values for parameter...

CVE-2026-116590

snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. Prior to 1.1.10.9, Snappy.arrayCopyObject src, int offset, int byteLength, Object dest, int destOffset passes caller-supplied ranges to native memcpy without validating either array, allowing negativ...