Skip to content
OpenAdvisories

Package · Debian

snappy-java

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-108106

    Xerial snappy-java before 1.1.10.9 Unbounded Memory Allocation Denial of Service

    Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows attackers to exhaust JVM memory by declaring a large uncompressed length in compressed input. Attackers can supply a few crafted bytes to Snappy.uncompress, u…

    xerial snappy-java snappy-java org.xerial.snappy:snappy-java Debian Ubuntu Maven
  • High 7.5
    CVE-2023-43642

    Missing upper bound check on chunk length in snappy-java

    snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. The SnappyInputStream was found to be vulnerable to Denial of Service (DoS) attacks when decompressing data with a too large chunk size. Due to missing upper bou…

    xerial snappy-java snappy-java org.xerial.snappy:snappy-java Debian Ubuntu Maven