GHSA-GWQ9-9FFJ-MVRV snappy-java: Heap buffer overflow in Snappy.uncompress*Array typed-array methods

Impact Snappy.uncompressCharArray, uncompressShortArray, uncompressIntArray, uncompressLongArray, uncompressFloatArray and uncompressDoubleArray sized the result array by dividing the declared uncompressed byte length by the element size, but native code wrote the full byte length. If the declare...

snappy-java: Heap buffer overflow in Snappy.uncompress*Array typed-array methods

Impact Snappy.uncompressCharArray, uncompressShortArray, uncompressIntArray, uncompressLongArray, uncompressFloatArray and uncompressDoubleArray sized the result array by dividing the declared uncompressed byte length by the element size, but native code wrote the full byte length. If the declare...

EUVD-2026-82603

snappy-java: Heap buffer overflow in Snappy.uncompressArray typed-array methods...

snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWrite

Impact Snappy.arrayCopyObject src, int offset, int byteLength, Object dest, int destOffset called a native memcpy without validating the ranges. A negative or oversized byteLength or offset read or wrote outside the arrays and crashed the JVM. SnappyOutputStream.rawWrite and...

GHSA-XQRX-QH46-34M7 snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWrite

Impact Snappy.arrayCopyObject src, int offset, int byteLength, Object dest, int destOffset called a native memcpy without validating the ranges. A negative or oversized byteLength or offset read or wrote outside the arrays and crashed the JVM. SnappyOutputStream.rawWrite and...

EUVD-2026-110473

snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWrite...

GHSA-Q233-G92Q-QXP6 snappy-java: Unbounded memory allocation from attacker-declared uncompressed lengtha

Impact Several decompression paths in snappy-java allocate an output buffer sized by the uncompressed length declared in the first bytes of the compressed data, before decompressing or validating it. A few bytes of crafted input can therefore force an allocation of up to 2 GB, causing...

snappy-java: Unbounded memory allocation from attacker-declared uncompressed lengtha

Impact Several decompression paths in snappy-java allocate an output buffer sized by the uncompressed length declared in the first bytes of the compressed data, before decompressing or validating it. A few bytes of crafted input can therefore force an allocation of up to 2 GB, causing...

EUVD-2026-95807

snappy-java: Unbounded memory allocation from attacker-declared uncompressed lengtha...

CVE-2026-116590

snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. Prior to 1.1.10.9, Snappy.arrayCopyObject src, int offset, int byteLength, Object dest, int destOffset passes caller-supplied ranges to native memcpy without validating either array, allowing negativ...

CVE-2026-116590

The snappy-java library (prior to version 1.1.10.9 ) contains a vulnerability where Snappy.arrayCopy fails to validate caller-supplied ranges before passing them to native memcpy . This allows negative or oversized byteLength and offset values to perform out-of-bounds reads or writes, leading to ...

CVE-2026-116590 snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWrite

snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. Prior to 1.1.10.9, Snappy.arrayCopyObject src, int offset, int byteLength, Object dest, int destOffset passes caller-supplied ranges to native memcpy without validating either array, allowing negativ...

CVE-2026-116590 snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWrite

snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. Prior to 1.1.10.9, Snappy.arrayCopyObject src, int offset, int byteLength, Object dest, int destOffset passes caller-supplied ranges to native memcpy without validating either array, allowing negativ...

PT-2026-125470

Impact Snappy.arrayCopyObject src, int offset, int byteLength, Object dest, int destOffset called a native memcpy without validating the ranges. A negative or oversized byteLength or offset read or wrote outside the arrays and crashed the JVM. SnappyOutputStream.rawWrite and...

CLEANSTART-2026-FN33770 Xerial snappy-java from 1

Security vulnerability affects the solr package. Xerial snappy-java from 1...

CLEANSTART-2026-OU24429 snappy-java through 1

Security vulnerability affects the solr package. snappy-java through 1...

CLEANSTART-2026-ZO24294 snappy-java through 1

Security vulnerability affects the solr package. snappy-java through 1...

CLEANSTART-2026-DF81862 snappy-java through 1

Security vulnerability affects the solr package. snappy-java through 1...

CLEANSTART-2026-BS90242 Xerial snappy-java before 1

Security vulnerability affects the solr package. Xerial snappy-java before 1...

Astra Linux – Vulnerability in snappy-java

Snappy-Java is a Java port of the snappy, a fast C++ compressor/decompressor developed by Google. It was found that the SnappyInputStream is vulnerable to Denial of Service DoS attacks when decompressing data with a too large chunk size. Due to a lack of a upper bound check on the chunk length, a...