snappy-java: Unbounded memory allocation from attacker-declared uncompressed lengtha
影響: maven:org.xerial.snappy:snappy-java <= 1.1.10.8 → 1.1.10.9
Several decompression paths in snappy-java allocate an output buffer sized by the uncompressed length declared in the first bytes of the compressed data, before decompressing or validating it. A few bytes of crafted input can therefore force an allocation of up to 2 GB, causing OutOfMemoryError (denial of service), or a NegativeArraySizeException for declared lengths of 2^31 or more. Affected entry points include Snappy.uncompress(byte[]), Snappy.uncompressString, the Snappy.uncompressArray met…
| CVE | CVE-2026-108106 |
|---|---|
| 정보원 | GitHub Advisory Database |
| 수집 시각 | 2026. 10. 28. 오전 06:03 |
| 데이터 | Markdown JSON |
2026. 10. 28. 오전 12:33, GitHub Advisory Database에서 "snappy-java: Unbounded memory allocation from attacker-declared uncompressed lengtha"을(를) 게시했습니다 (유형: 취약점 권고). 심각도는 "높음"(high)입니다. 관련 기술: Java. CVE: CVE-2026-108106.