1. Home
  2. CVE Database
  3. CVE-2019-11922
HIGH · 8.1

CVE-2019-11922

A race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could allow an attacker to write bytes out of bounds if an output buffer smaller than the recommended size wa...

Vulnerability Description

A race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could allow an attacker to write bytes out of bounds if an output buffer smaller than the recommended size was used.

CVSS Score

8.1

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
FacebookZstandard< 1.3.8

Related Weaknesses (CWE)

CWE-362

References

FAQ

What is CVE-2019-11922?

CVE-2019-11922 is a vulnerability with a CVSS score of 8.1 (HIGH). A race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could allow an attacker to write bytes out of bounds if an output buffer smaller than the recommended size wa...

How severe is CVE-2019-11922?

CVE-2019-11922 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-11922?

Check the references section above for vendor advisories and patch information. Affected products include: Facebook Zstandard.