Skip to content
OpenAdvisories

Package · Debian

rust-lz4-flex

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.2
    CVE-2026-32829

    lz4_flex: Decompression can leak information from uninitialized memory or reused output buffer

    lz4_flex is a pure Rust implementation of LZ4 compression/decompression. In versions 0.11.5 and below, and 0.12.0, decompressing invalid LZ4 data can leak sensitive information from uninitialized memory or from previous decompression operations. The library f…

    PSeitz lz4_flex rust-lz4-flex lz4_flex Debian Ubuntu crates.io