Skip to content
OpenAdvisories

Vendor

dain

1 known vulnerabilities.

Products

snappy 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2024-36124

    iq80 Snappy has an out-of-bounds read when uncompressing data, leading to JVM crash

    iq80 Snappy is a compression/decompression library. When uncompressing certain data, Snappy tries to read outside the bounds of the given byte arrays. Because Snappy uses the JDK class `sun.misc.Unsafe` to speed up memory access, no additional bounds checks a…

    dain snappy apache-nifi apache-nifi-toolkit Wolfi Maven