Vulnerability Description
snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in Snappy.compress(ByteBuffer, ByteBuffer) that writes past the end of the destination buffer. Attackers can supply incompressible data that exceeds the destination buffer's remaining capacity, corrupting off-heap memory and causing JVM termination.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/xerial/snappy-java
- https://github.com/xerial/snappy-java/blob/v1.1.10.8/src/main/java/org/xerial/sn
- https://github.com/xerial/snappy-java/issues/732
- https://www.vulncheck.com/advisories/snappy-java-through-1.1.10.8-buffer-overflo
- https://github.com/xerial/snappy-java/issues/732
FAQ
What is CVE-2026-93452?
CVE-2026-93452 is a vulnerability with a CVSS score of 7.5 (HIGH). snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in Snappy.compress(ByteBuffer, ByteBuffer) that writes past the end of the destination buffer. Attackers can supply incompressible...
How severe is CVE-2026-93452?
CVE-2026-93452 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-93452?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.