Lucene search
+L

4 matches found

RedHat Linux
RedHat Linux
added 2026/02/04 11:35 a.m.3 views

lz4-java: lz4-java: Out-of-bounds memory operations lead to denial of service and information disclosure

A flaw was found in lz4-java. This vulnerability allows remote attackers to cause denial of service DoS and read adjacent memory via untrusted compressed input. This vulnerability affects only programs using the unsafe LZ4decompressfast API, known as the "fast" decompressor...

8.8CVSS5.8AI score0.00661EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2026/02/04 4:47 a.m.7 views

lz4-java: lz4-java: Out-of-bounds memory operations lead to denial of service and information disclosure

A flaw was found in lz4-java. This vulnerability allows remote attackers to cause denial of service DoS and read adjacent memory via untrusted compressed input. This vulnerability affects only programs using the unsafe LZ4decompressfast API, known as the "fast" decompressor...

8.8CVSS5.8AI score0.00661EPSS
Exploits0References6
Snyk
Snyk
added 2025/11/28 4:39 p.m.10 views

Out-of-bounds Read

Overview org.lz4:lz4-java is a Java port of the LZ4 compression algorithm and the xxHash hashing algorithm. Affected versions of this package are vulnerable to Out-of-bounds Read due to the use of the insecure LZ4decompressfast in the underlying lz4 library, which lacks bounds checks. An attacker...

8.8CVSS6.6AI score0.00661EPSS
Exploits0References2
Snyk
Snyk
added 2025/11/28 4:39 p.m.13 views

Out-of-bounds Read

Overview net.jpountz.lz4:lz4 is a package for LZ4 compression for Java Affected versions of this package are vulnerable to Out-of-bounds Read due to the use of the insecure LZ4decompressfast in the underlying lz4 library, which lacks bounds checks. An attacker can cause denial of service or acces...

8.8CVSS6.6AI score0.00661EPSS
Exploits0References2
Rows per page
Query Builder