CVE-2026-93452 — snappy-java through 1.1.10.8 Buffer Overflow in Snappy.compress
snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in Snappy.compress(ByteBuffer, ByteBuffer) that writes past the end of the destination buffer. Attackers ca…
Published: 2026-09-17 · CVSS: 8.7 · CVSS 4.0
snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in Snappy.compress(ByteBuffer, ByteBuffer) that writes past the end of the destination buffer. Attackers can supply incompressible data that exceeds the destination buffer's remaining capacity, corrupting off-heap memory and causing JVM termination.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7