snappy-java: Heap buffer overflow in Snappy.uncompress*Array typed-array methods

影響: maven:org.xerial.snappy:snappy-java <= 1.1.10.8 → 1.1.10.9

Snappy.uncompressCharArray, uncompressShortArray, uncompressIntArray, uncompressLongArray, uncompressFloatArray and uncompressDoubleArray sized the result array by dividing the declared uncompressed byte length by the element size, but native code wrote the full byte length. If the declared length is not a multiple of the element size, up to 7 bytes are written past the end of the Java array, corrupting the heap. Patches Fixed in 1.1.10.9 ([#739](https://github.com/xerial/snappy-java/pull/739))…

在 GitHub Advisory Database 阅读

2026/10/28 00:33，GitHub Advisory Database 发布了“snappy-java: Heap buffer overflow in Snappy.uncompress*Array typed-array methods”（类型：漏洞公告）。严重程度为“高危”（high）。相关技术：Java。CVE：CVE-2026-93451。