CVE-2026-93452 | BDVDB-2026-376554 Detail

Description#

snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in Snappy.compress(ByteBuffer, ByteBuffer) that writes past the end of the destination buffer. Attackers can supply incompressible data that exceeds the destination buffer's remaining capacity, corrupting off-heap memory and causing JVM termination.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-09-17Record published in the CVE List.
2. Version 22026-10-08Most recent update recorded in the CVE List.