Unscored USN-4108-1 1 CVE

libzstd vulnerability

Published Aug 21, 2019 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Zstandard incorrectly handled certain inputs.
An attacker could possibly use this issue to execute arbitrary code.

Fixed packages 1

Release	Package	Fixed in
Ubuntu · 18.04 LTS 18.04:LTS	libzstd	1.3.3+dfsg-2ubuntu1.1

Vulnerabilities 1

Unscored —

CVE-2019-11922

A race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could allow an attacker to w…

Facebook Zstandard libzstd libzstd Debian Ubuntu Alpine

Jul 25, 2019

References

report
https://ubuntu.com/security/CVE-2019-11922