292 matches found
GHSA-Q233-G92Q-QXP6 snappy-java: Unbounded memory allocation from attacker-declared uncompressed lengtha
Impact Several decompression paths in snappy-java allocate an output buffer sized by the uncompressed length declared in the first bytes of the compressed data, before decompressing or validating it. A few bytes of crafted input can therefore force an allocation of up to 2 GB, causing...
EUVD-2026-95807
snappy-java: Unbounded memory allocation from attacker-declared uncompressed lengtha...
snappy-java: Unbounded memory allocation from attacker-declared uncompressed lengtha
Impact Several decompression paths in snappy-java allocate an output buffer sized by the uncompressed length declared in the first bytes of the compressed data, before decompressing or validating it. A few bytes of crafted input can therefore force an allocation of up to 2 GB, causing...
ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +23694 more potentially affected by CVE-2026-108106 via org.xerial.snappy:snappy-java (>=1.0.1-rc3, <=1.1.10.8)
org.xerial.snappy:snappy-java MAVEN version =1.0.1-rc3, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.10 and more Source cves: CVE-2026-108106 Source advisory: GHSA-Q233-G92Q-QXP6...
ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +23694 more potentially affected by CVE-2026-108106 via org.xerial.snappy:snappy-java (>=1.0.1-rc3, <=1.1.10.8)
org.xerial.snappy:snappy-java MAVEN version =1.0.1-rc3, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.10 and more Source cves: CVE-2026-108106 Source advisory: OSV:GHSA-Q233-G92Q-QXP6...
Improper Validation of Array Index
Overview Affected versions of this package are vulnerable to Improper Validation of Array Index via the Snappy.arrayCopy and SnappyOutputStream.rawWrite functions. An attacker can cause the JVM to crash or trigger out-of-bounds memory access by supplying negative or oversized values for parameter...
CVE-2026-116590
snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. Prior to 1.1.10.9, Snappy.arrayCopyObject src, int offset, int byteLength, Object dest, int destOffset passes caller-supplied ranges to native memcpy without validating either array, allowing negativ...
DEBIAN-CVE-2026-116590
snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. Prior to 1.1.10.9, Snappy.arrayCopyObject src, int offset, int byteLength, Object dest, int destOffset passes caller-supplied ranges to native memcpy without validating either array, allowing negativ...
UBUNTU-CVE-2026-116590
snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. Prior to 1.1.10.9, Snappy.arrayCopyObject src, int offset, int byteLength, Object dest, int destOffset passes caller-supplied ranges to native memcpy without validating either array, allowing negativ...
CVE-2026-116590
snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. Prior to 1.1.10.9, Snappy.arrayCopyObject src, int offset, int byteLength, Object dest, int destOffset passes caller-supplied ranges to native memcpy without validating either array, allowing negativ...
CVE-2026-116590
The snappy-java library (prior to version 1.1.10.9 ) contains a vulnerability where Snappy.arrayCopy fails to validate caller-supplied ranges before passing them to native memcpy . This allows negative or oversized byteLength and offset values to perform out-of-bounds reads or writes, leading to ...
CVE-2026-116590 snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWrite
snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. Prior to 1.1.10.9, Snappy.arrayCopyObject src, int offset, int byteLength, Object dest, int destOffset passes caller-supplied ranges to native memcpy without validating either array, allowing negativ...
CVE-2026-116590 snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWrite
snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. Prior to 1.1.10.9, Snappy.arrayCopyObject src, int offset, int byteLength, Object dest, int destOffset passes caller-supplied ranges to native memcpy without validating either array, allowing negativ...
CVE-2026-116590 snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWrite
snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. Prior to 1.1.10.9, Snappy.arrayCopyObject src, int offset, int byteLength, Object dest, int destOffset passes caller-supplied ranges to native memcpy without validating either array, allowing negativ...
CVE-2026-116590
snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. Prior to 1.1.10.9, Snappy.arrayCopyObject src, int offset, int byteLength, Object dest, int destOffset passes caller-supplied ranges to native memcpy without validating either array, allowing negativ...
PT-2026-125470
Impact Snappy.arrayCopyObject src, int offset, int byteLength, Object dest, int destOffset called a native memcpy without validating the ranges. A negative or oversized byteLength or offset read or wrote outside the arrays and crashed the JVM. SnappyOutputStream.rawWrite and...
Taro L. Saito snappy-java input validation error vulnerability
Versions of Taro L. Saito’s snappy-java prior to 1.1.10.9 contain a security vulnerability. This vulnerability arises because Snappy.arrayCopy passes an array range provided by the caller to native memcpy without validation; this allows negative values or excessively large byteLength and offset...
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Out-of-bounds Write in snappy-java (CVE-2026-90559)
Summary IBM Watson Speech Services Cartridge is vulnerable to an Out-of-bounds Write in snappy-java because destination buffer capacity is never validated against decompressed size. Snappy-java is used in our Speech microservices. This vulnerability has been addressed. Please read the details for...