Skip to content
OpenAdvisories

Package · crates.io

lz4-sys

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    GHSA-9q5j-jm53-v7vr

    lz4-sys vulnerable to memory corruption via issue in liblz4

    lz4-sys up to v1.9.3 bundles a version of liblz4 that is vulnerable to [CVE-2021-3520](https://nvd.nist.gov/vuln/detail/CVE-2021-3520). Attackers could craft a payload that triggers an integer overflow upon decompression, causing an out-of-bounds write. The f…

    lz4-sys crates.io