Threats tagged 'ghsa-p9j8-93gx-5h3x'

A vulnerability in silviucpp ezstd versions from 1.0.5 before 1.2.5 allows an attacker to supply a specially crafted zstd frame that declares a very large content size, causing excessive memory allocation and termination of the Erlang VM. The flaw occurs because the decompression function using a dictionary does not enforce the 1 GiB maximum buffer size check, unlike the standard decompression path. This can lead to memory exhaustion and denial of service.