PT-2025-48344 · Lz4-Java+1 · Lz4-Java+1

Jonas Konrad + 1 · Publicado 2025-11-26 · Atualizado 2026-05-18 · CVE-2025-12183

Positive Technologies (AI Summary)

CVSS v2.0

9.4

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:C

Name of the Vulnerable Software and Affected Versions org.lz4:lz4-java versions prior to 1.8.0

Description The software contains flaws related to memory handling. Specifically, out-of-bounds memory operations can occur when processing untrusted compressed input. This can lead to a denial of service and potential reading of adjacent memory.

Recommendations Update to a version newer than 1.8.0.

Correção

DoS

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

BDU:2025-15118

CLEANSTART-2026-AO61361

CVE-2025-12183

ECHO-CD33-EC70-D5F2

GHSA-VQF4-7M7X-WGFC

OPENSUSE-SU-2026:10317-1

RHSA-2026:1870

RHSA-2026:1871

Produtos afetados

Debian

Lz4-Java

Referências · 56

• https://github.com/yawkat/lz4-java/releases/tag/v1.8.1 · Correção
• https://github.com/yawkat/lz4-java · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-AO61361.json · Nota
• https://osv.dev/vulnerability/ghsa-355h-qmc2-wpwf · Nota
• https://osv.dev/vulnerability/CVE-2025-12383 · Nota
• https://bdu.fstec.ru/vul/2025-15118 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-12183 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2025-12183 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2025-67030 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-66566 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2025-12383 · Nota de Segurança
• https://osv.dev/vulnerability/ghsa-7xrh-hqfc-g7qr · Nota
• https://osv.dev/vulnerability/CVE-2026-42583 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2024-6763 · Nota de Segurança
• https://suse.com/security/cve/CVE-2025-12183 · Nota