SN
Product
snappy-java
11
CVEs
0
On KEV
7.5
Max CVSS
3
New 30D
Severity mix
Critical 0High 7Medium 4Low 0
Watch
Add snappy-java to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-108106 | 7.5 | Oct 9 | Xerial snappy-java before 1.1.10.9 Unbounded Memory Allocation Denial of Service Affected: before 1.1.10.9 |
| CVE-2026-93452 | 7.5 | Sep 17 | snappy-java through 1.1.10.8 Buffer Overflow in Snappy.compress Affected: through 1.1.10.8 |
| CVE-2026-90559 | 7.5 | Sep 12 | snappy-java through 1.1.10.8 Out-of-Bounds Write via uncompress Affected: through 1.1.10.8 |
| CVE-2023-43642 | 7.5 | Sep 25 | Missing upper bound check on chunk length in snappy-java Affected: < 1.1.10.4 |
| CVE-2023-34455 | 7.5 | Jun 15 | snappy-java's unchecked chunk length leads to DoS Affected: < 1.1.10.1 |
| CVE-2023-34454 | 7.5 | Jun 15 | snappy-java's Integer Overflow vulnerability in compress leads to DoS Affected: < 1.1.10.1 |
| CVE-2023-34453 | 7.5 | Jun 15 | snappy-java's Integer Overflow vulnerability in shuffle leads to DoS Affected: < 1.1.10.1 |
| CVE-2026-93451 | 6.5 | Sep 17 | snappy-java through 1.1.10.8 Buffer Overflow via typed uncompress methods Affected: through 1.1.10.8 |
| CVE-2026-116590 New | 5.9 | Oct 26 | snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWrite Affected: < 1.1.10.9 |
| CVE-2024-36124 | 5.3 | Jun 3 | iq80 Snappy has an out-of-bounds read when uncompressing data, leading to JVM crash Affected: before 0.5 |
| CVE-2026-108104 | 4.8 | Oct 9 | Xerial snappy-java 1.1.7.4 before 1.1.10.10 Double Release of Pooled Buffers in SnappyFramedInputStream Affected: 1.1.7.4 before 1.1.10.10 |
Showing 11