CVE-2026-93452

Name of the Vulnerable Software and Affected Versions snappy-java versions 1.1.10.8 and earlier

Description A buffer overflow occurs in the Snappy.compress(ByteBuffer, ByteBuffer) function when processing incompressible data that exceeds the remaining capacity of the destination buffer. This allows the process to write past the end of the buffer, leading to off-heap memory corruption and JVM termination, which can result in a Denial of Service (DoS) when untrusted data is compressed into fixed-size direct buffers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.