CVE-2026-93451

snappy-java through version 1.1.10.8 contains a buffer overflow in typed Snappy.uncompress*Array methods. The root cause is a length-handling mismatch: output arrays are allocated by dividing the uncompressed length by the element size, but the undivided (full) length is passed to the native code...