snappy-java: Heap buffer overflow in Snappy.uncompress*Array typed-array methods

影響: maven:org.xerial.snappy:snappy-java <= 1.1.10.8 → 1.1.10.9

Snappy.uncompressCharArray, uncompressShortArray, uncompressIntArray, uncompressLongArray, uncompressFloatArray and uncompressDoubleArray sized the result array by dividing the declared uncompressed byte length by the element size, but native code wrote the full byte length. If the declared length is not a multiple of the element size, up to 7 bytes are written past the end of the Java array, corrupting the heap. Patches Fixed in 1.1.10.9 ([#739](https://github.com/xerial/snappy-java/pull/739))…

Read on GitHub Advisory Database

On 10/28/2026, 12:33 AM, GitHub Advisory Database published "snappy-java: Heap buffer overflow in Snappy.uncompress*Array typed-array methods" (type: Advisory). Severity is "High" (high). Related technologies: Java. CVE: CVE-2026-93451.