CVE-2026-122127

CESNET ipfixcol2 2.7.1 before 2.9.0 contains a heap-based buffer overflow in Lz4Decoder.cpp that allows unauthenticated network peers to write past heap buffers. Attackers can declare a small ring buffer size followed by a large decompressed size to write up to 65535 controlled bytes and crash the collector.