Skip to content
OpenAdvisories

Vendor

luben

9 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 4.0

    zstd-jni 1.4.8-4 through 1.5.7-13 Denial of Service via Negative Length

    zstd-jni versions 1.4.8-4 through 1.5.7-13 fail to validate negative length parameters in ZstdInputStreamNoFinalizer.read(), allowing attackers to trigger infinite loops. Attackers can pass negative length values to cause the read method to spin indefinitely …