Threats tagged 'ghsa-mrhq-xxpp-qf7j'

snappy-java versions up to 1.1.10.8 contain an out-of-bounds write vulnerability in the Snappy.uncompress(ByteBuffer, ByteBuffer) method. This occurs because the destination buffer's capacity is not validated against the decompressed size, allowing attackers to supply compressed data that decompresses to a size larger than the destination buffer. This can cause writes beyond buffer boundaries and lead to JVM termination.