Threats Tagged 'ghsa-h98q-h7vh-hjv2'

An out-of-bounds read vulnerability exists in zstd-jni versions 1.5.5-6 through 1.5.7-13 in the Zstd.getFrameContentSize method. The flaw occurs because negative srcPosition arguments are not properly validated, allowing attackers to bypass bounds checks and cause out-of-bounds memory reads. This can lead to information disclosure or JVM crashes.