Vulnerability in xerial snappy-java

[ Description ]Official description

snappy-java through 1.1.10.8 contains an out-of-bounds write vulnerability in Snappy.uncompress(ByteBuffer, ByteBuffer) because destination buffer capacity is never validated against decompressed size. Attackers can supply valid compressed data that decompresses larger than the destination buffer, causing writes past buffer boundaries and JVM termination.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• BSI CERT-Bund6 Oct 2026WID-SEC-2026-3791

  IBM SPSS: Multiple vulnerabilities Translated from German

  Risk highCVE-2026-87795CVE-2026-87824CVE-2026-73334+7 more CVEs

[ References ]References

• github.com/xerial/snappy-java/issues/728issue-tracking
• github.com/xerial/snappy-javaproduct
• github.com/xerial/snappy-java/blob/v1.1.10.8/src/main/java/org/xerial/snappy/Snappy.javatechnical-description
• www.vulncheck.com/advisories/snappy-java-through-1.1.10.8-out-of-bounds-write-via-uncom…third-party-advisory