Skip to content
OpenAdvisories

Package · Debian

lz4

4 known vulnerabilities.

4 results · Feed

  • Unscored —

    There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger …

  • Unscored —
    CVE-2019-17543 EPSS 10%

    LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize), affecting applicat…

  • Unscored —

    Integer overflow in the LZ4 algorithm implementation, as used in Yann Collet LZ4 before r118 and in the lz4_uncompress …

  • Unscored —

    Yann Collet LZ4 before r119, when used on certain 32-bit platforms that allocate memory beyond 0x80000000, does not pro…