{"id":"ghsa-ghsa-q233-g92q-qxp6","seq":1708798,"kind":"advisory","title":"snappy-java: Unbounded memory allocation from attacker-declared uncompressed lengtha","url":"https://github.com/advisories/GHSA-q233-g92q-qxp6","permalink":"https://vulnpulse.app/items/ghsa-ghsa-q233-g92q-qxp6","summary":"影響: maven:org.xerial.snappy:snappy-java <= 1.1.10.8 → 1.1.10.9\nSeveral decompression paths in snappy-java allocate an output buffer sized by the uncompressed length declared in the first bytes of the compressed data, before decompressing or validating it. A few bytes of crafted input can therefore force an allocation of up to 2 GB, causing OutOfMemoryError (denial of service), or a NegativeArraySizeException for declared lengths of 2^31 or more. Affected entry points include Snappy.uncompress(byte[]), Snappy.uncompressString, the Snappy.uncompressArray met…","severity":"high","techs":["java"],"cves":["CVE-2026-108106"],"tags":["GHSA-q233-g92q-qxp6","org.xerial.snappy:snappy-java"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-27T15:33:22.000Z","fetched_at":"2026-10-27T21:03:52.214Z"}