Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow through the LZO decompression logic. An attacker can cause memory corruption by providing a specially crafted ORC file. During decompression a malformed ORC file can attempt to copy more bytes than was allocat...