xerial vulnerabilities

CVEs per yearBy the year they were published

1. 20235
2. 20266

Newest CVEs

• CVE-2026-116590

  snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWrite

  xerial · snappy-java

  Medium5.9
• CVE-2026-108106

  Xerial snappy-java before 1.1.10.9 Unbounded Memory Allocation Denial of Service

  xerial · snappy-java

  High8.7
• CVE-2026-108104

  Xerial snappy-java 1.1.7.4 before 1.1.10.10 Double Release of Pooled Buffers in SnappyFramedInputStream

  xerial · snappy-java

  Medium6.3
• CVE-2026-93452

  snappy-java through 1.1.10.8 Buffer Overflow in Snappy.compress

  xerial · snappy-java

  High8.7
• CVE-2026-93451

  snappy-java through 1.1.10.8 Buffer Overflow via typed uncompress methods

  xerial · snappy-java

  Medium6.9
• CVE-2026-90559

  snappy-java through 1.1.10.8 Out-of-Bounds Write via uncompress

  xerial · snappy-java

  High8.7
• CVE-2023-43642

  Missing upper bound check on chunk length in snappy-java

  xerial · snappy-java

  High7.5
• CVE-2023-34455

  snappy-java's unchecked chunk length leads to DoS

  xerial · snappy-java

  High7.5
• CVE-2023-34454

  snappy-java's Integer Overflow vulnerability in compress leads to DoS

  xerial · snappy-java

  Medium5.9
• CVE-2023-34453

  snappy-java's Integer Overflow vulnerability in shuffle leads to DoS

  xerial · snappy-java

  Medium5.9