Heap-Based Buffer Overflow in LZ4 Compression Library by LZ4
CVE-2019-17543
8.1HIGH
What is CVE-2019-17543?
The LZ4 compression library prior to version 1.9.2 is susceptible to a heap-based buffer overflow vulnerability in the LZ4_write32 function. This issue arises when high amounts of data are sent to the LZ4_compress_fast function, leading to potential data corruption. While the vendor points out that only certain uncommon API usages are at risk, developers should be cautious and consider upgrading to version 1.9.2 or higher to mitigate these risks.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
References
CVSS V3.1
Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved