CVE-2019-11922

CVE-2019-11922 is supported by multiple connected advisories detailing a race condition in Zstandard (zstd) one-pass compression prior to version 1.3.8. The issue allows potential out-of-bounds writes when an output buffer smaller than the recommended size is used. Affected software is the zstd i...

CVE-2021-24031

CVE-2021-24031 is discussed in the connected IBM security bulletin as part of a broader set of vulnerabilities. The Zstandard command-line utility prior to v1.4.1 creates output files with default permissions and only sets the correct permissions at completion time, potentially making outputs rea...