CVE-2026-93451Medium· 6.5▾ Sunlitsnappy-java through 1.1.10.8 contains a buffer overflow vulnerability in typed Snappy.uncompress*Array methods that allocate output arrays by dividing uncompressed length by element size but pass the undivided length to native code. Atta…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Sep 19.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.3%
0.3% → 0.5%
Last analysed / modified upstream
snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in typed Snappy.uncompress*Array methods that allocate output arrays by dividing uncompressed length by element size but pass the undivided length to native code. Attackers controlling compressed input can cause misaligned length values to write past array bounds with attacker-controlled bytes, corrupting heap memory.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Affected packages:
org.xerial.snappy:snappy-java <= 1.1.10.8Patched in:
org.xerial.snappy:snappy-java 1.1.10.9Connected by shared product, vendor, weakness, or advisory.
CVE-2026-90559High· 7.5snappy-java through 1.1.10.8 contains an out-of-bounds write vulnerability in Snappy.uncompress(ByteBuffer, ByteBuffer) because destination buffer capacity is never validated against decompressed size
GHSA-wm36-87w8-wg22Medium· 6.5Duplicate Advisory: snappy-java: Heap buffer overflow in Snappy.uncompress*Array typed-array methods
GHSA-94x4-5g3f-jjxpHigh· 7.5Duplicate Advisory: snappy-java: Unbounded memory allocation from attacker-declared uncompressed lengtha
CVE-2026-93452High· 7.5snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in Snappy.compress(ByteBuffer, ByteBuffer) that writes past the end of the destination buffer
CVE-2026-116590Medium· 5.9snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWrite
CVE-2026-97631Critical· 9.5Pre-boot RCE in EDK II PXE driver