Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2021-3520

lz4: memory corruption due to an integer overflow bug caused by memmove argument

There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling of memmove() on a negative size argument, causing an out-of-bounds write and/or a crash. The greatest impact of this flaw is to availability, with some potential impact to confidentiality and integrity as well.

CVSS 3.1 · 9.8 Critical EPSS 3.4% KEV · Not listed
Vendors
Lz4 Project Netapp Oracle and 2 more
Products
Lz4 Active Iq Unified Manager Cloud Backup and 9 more
CVE-2019-17543

lz4: heap-based buffer overflow in LZ4_write32

LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize), affecting applications that call LZ4_compress_fast with a large input. (This issue can also lead to data corruption.) NOTE: the vendor states "only a few specific / uncommon usages of the API are at risk."

CVSS 3.1 · 8.1 High EPSS 10.5% KEV · Not listed
Vendors
Lz4 Project
Products
Lz4
CVE-2025-62813

lz4: LZ4 null handling error

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

CVSS 3.1 · 5.9 Medium EPSS n/a KEV · Not listed
Vendors
Lz4 Project
Products
Lz4