CVE-2026-90559 — snappy-java through 1.1.10.8 Out-of-Bounds Write via uncompress
snappy-java through 1.1.10.8 contains an out-of-bounds write vulnerability in Snappy.uncompress(ByteBuffer, ByteBuffer) because destination buffer capacity is never validated ag…
Published: 2026-09-12 · CVSS: 8.7 · CVSS 4.0
snappy-java through 1.1.10.8 contains an out-of-bounds write vulnerability in Snappy.uncompress(ByteBuffer, ByteBuffer) because destination buffer capacity is never validated against decompressed size. Attackers can supply valid compressed data that decompresses larger than the destination buffer, causing writes past buffer boundaries and JVM termination.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7