1 result · Clear filters · Feed
-
High 7.5
Decompression bomb in `ruzstd`: a tiny input can exhaust memory (OOM)
A crafted `.zst` input under 128 KB can force `ruzstd` to allocate several gigabytes at once, crashing the process with an out-of-memory condition. Since `ruzstd` is a decoder for untrusted input, a single small file is enough to take down anything decoding i…