https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-20T15:05:33.194462+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-109395 CVE-2026-109395 — Ning compress-lzf before 1.2.0 Out-of-Bounds Memory Access via UnsafeChunkDecoder 2026-10-20T15:05:33.195255+00:00

Affected: ning compress-lzf

Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc.Unsafe based UnsafeChunkDecoder that fails to validate back-references and literal runs. Attackers can supply crafted LZF streams to applications using the default LZFDecoder to leak unrelated JVM heap memory into decompressed output or crash the JVM.