CVE record · 1 source
CVE-2026-106452
CVSS 5.3yawkat LZ4 Java provides LZ4 compression for Java.
- Vendor
- Canonical, Oracle
- Product
- canonical, java
- CVSS
- 5.3
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
yawkat LZ4 Java provides LZ4 compression for Java.
yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.2, net.jpountz.lz4.LZ4BlockInputStream refill() validates that the compressedLen field in a legacy LZ4Block header is nonnegative but allocates a compressed-input…