Repository navigation
Security: luben/zstd-jni
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Negative-offset bounds-check bypass in deprecated Zstd.decompressedSize(byte[],int,int,boolean) -> native OOB readGHSA-8w96-r9r5-4j3r published
Sep 16, 2026 by lubenModerate -
Signed-long comparison lets a forged Frame_Content_Size bypass the MAX_DECOMPRESS_SIZE cap in Zstd.decompress(byte[]) -> ~1GiB alloc / NegativeArraySizeException from a 17-byte frameGHSA-5p47-q5r2-3396 published
Aug 29, 2026 by lubenModerate -
Infinite Loop via Negative Length in ZstdInputStreamNoFinalizer.read()GHSA-9jx2-gfp9-phfm published
Aug 19, 2026 by lubenModerate -
Negative-Offset Bypass in Zstd.getFrameContentSize Bounds CheckGHSA-rm53-6wf5-f34m published
Aug 19, 2026 by lubenModerate -
Integer Overflow Bypasses Bounds Check on Direct ByteBuffer Frame-Size QueriesGHSA-jfr6-9xqw-2g2q published
Aug 19, 2026 by lubenModerate -
Out-of-Bounds Read via Zstd.trainFromBufferDirect() Unchecked Sample SizesGHSA-257p-3h6w-pg7h published
Aug 19, 2026 by lubenHigh -
Use-After-Free via Missing Closed-State Check on setDict/setLongMax/setLevelGHSA-2jw3-mg7f-vw4q published
Aug 19, 2026 by lubenHigh -
Use-After-Free of compression/decompression dictionariesGHSA-947w-pxjj-c7m9 published
Aug 19, 2026 by lubenHigh -
Broken Bounds Check on ZstdDictCompress ConstructorGHSA-ff36-7w3w-g8rm published
Aug 19, 2026 by lubenHigh
Learn more about advisories related to luben/zstd-jni in the GitHub Advisory Database