PT-2025-48344

CVE-2025-12183

·

Publicado

2025-11-26

·

Atualizado

2026-10-15

Descrição por

CVSS 3.1
9.8
Crítica
MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions org.lz4:lz4-java versions prior to 1.8.0
Description The software contains flaws related to memory handling. Specifically, out-of-bounds memory operations can occur when processing untrusted compressed input. This can lead to a denial of service and potential reading of adjacent memory.
Recommendations Update to a version newer than 1.8.0.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-125: Out-of-bounds Read
Identificadores relacionados
CVE-2025-12183
BDU:2025-15118
GHSA-VQF4-7M7X-WGFC
CLEANSTART-2026-AO61361
CLEANSTART-2026-FR63847
CLEANSTART-2026-KF94035
CLEANSTART-2026-PT41131
CLEANSTART-2026-QA75834
CLEANSTART-2026-SD29232
CLEANSTART-2026-TF05670
CLEANSTART-2026-UW43752
ECHO-CD33-EC70-D5F2
OPENSUSE-SU-2026:10317-1
RHSA-2026:1870
RHSA-2026:1871
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com