snappy-java: Heap buffer overflow in Snappy.uncompress*Array typed-array methods
影響: maven:org.xerial.snappy:snappy-java <= 1.1.10.8 → 1.1.10.9
Snappy.uncompressCharArray, uncompressShortArray, uncompressIntArray, uncompressLongArray, uncompressFloatArray and uncompressDoubleArray sized the result array by dividing the declared uncompressed byte length by the element size, but native code wrote the full byte length. If the declared length is not a multiple of the element size, up to 7 bytes are written past the end of the Java array, corrupting the heap. Patches Fixed in 1.1.10.9 ([#739](https://github.com/xerial/snappy-java/pull/739))…
| CVE | CVE-2026-93451 |
|---|---|
| 정보원 | GitHub Advisory Database |
| 수집 시각 | 2026. 10. 28. 오전 06:03 |
| 데이터 | Markdown JSON |
2026. 10. 28. 오전 12:33, GitHub Advisory Database에서 "snappy-java: Heap buffer overflow in Snappy.uncompress*Array typed-array methods"을(를) 게시했습니다 (유형: 취약점 권고). 심각도는 "높음"(high)입니다. 관련 기술: Java. CVE: CVE-2026-93451.