Threats tagged 'ghsa-392q-wrgq-6wmj'

An out-of-bounds read vulnerability exists in the ZstdDictDecompress constructor of zstd-jni versions 1.2.0 through 1.5.7-13. This occurs because the offset and length parameters are not validated against the dictionary array bounds, allowing attackers to read memory beyond the intended array. This can potentially cause the Java Virtual Machine (JVM) to terminate unexpectedly.