snappy-java's Integer Overflow vulnerability in compress leads to DoS

CVE-2023-34454

What is CVE-2023-34454?

The Snappy library for Java is susceptible to an integer overflow issue due to unchecked multiplications in the compression function. When the length of the input character array is multiplied by two without proper validation, it can lead to an overflow, resulting in a negative length. This negative length subsequently causes allocation errors, specifically a java.lang.NegativeArraySizeException, or might allocate an insufficiently sized buffer, leading to fatal errors. This vulnerability affects multiple data types (char, double, float, int, long, short) utilized by the compress functions, except for byte arrays where such a situation is less likely to arise. Users are advised to upgrade to version 1.1.10.1, which includes fixes for this critical issue.

References