CVE-2026-93451— snappy-java through 1.1.10.8 Buffer Overflow via typed uncompress methods
Quick assessment
Affected
xerial snappy-java
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
snappy-java 库版本 1.1.10.8 及之前版本在类型化的 Snappy.uncompress*Array 方法中存在一个缓冲区溢出漏洞。这些方法在分配输出数组时，会用未压缩长度除以元素大小，但却将未除的原始长度传递给底层原生代码。攻击者若能控制压缩输入，便可构造导致长度值不对齐的数据，使得写入操作越过数组边界，用攻击者控制的字节破坏堆内存。
Possible ATT&CK Techniques 1 AI
T1055 · Process InjectionAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| xerial | snappy-java | ≤ 1.1.10.8 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-93451
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
snappy-java through 1.1.10.8 Buffer Overflow via typed uncompress methods
Source: CVE Program / CVE List V5
Vulnerability Description
snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in typed Snappy.uncompress*Array methods that allocate output arrays by dividing uncompressed length by element size but pass the undivided length to native code. Attackers controlling compressed input can cause misaligned length values to write past array bounds with attacker-controlled bytes, corrupting heap memory.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存写
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| xerial | snappy-java | 0 ~ 1.1.10.8 | - |
|
II. Public POCs for CVE-2026-93451
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-93451
请登录查看更多情报信息。
Proof of Concept for CVE-2026-93451 (1)
Other References for CVE-2026-93451 (2)
IV. Related Vulnerabilities
Same product: snappy-java
-
CVE-2026-93452
snappy-java through 1.1.10.8 Buffer Overflow in Snappy.compr -
CVE-2026-90559
snappy-java through 1.1.10.8 Out-of-Bounds Write via uncompr -
CVE-2023-43642
Missing upper bound check on chunk length in snappy-java -
CVE-2023-34455
snappy-java's unchecked chunk length leads to DoS -
CVE-2023-34454
snappy-java's Integer Overflow vulnerability in compress lea
Same vendor: xerial
-
CVE-2026-93452
snappy-java through 1.1.10.8 Buffer Overflow in Snappy.compr -
CVE-2026-90559
snappy-java through 1.1.10.8 Out-of-Bounds Write via uncompr -
CVE-2023-43642
Missing upper bound check on chunk length in snappy-java -
CVE-2023-34455
snappy-java's unchecked chunk length leads to DoS -
CVE-2023-34454
snappy-java's Integer Overflow vulnerability in compress lea
Same weakness: CWE-787
-
CVE-2026-94054
Exim 4.100.1前Proxy-Protocol致越界写入 -
CVE-2026-93894
Vinyl Cache 9.0、2 工作区缓冲区溢出致远程拒绝服务 -
CVE-2026-75892
Out of bounds write in PDP ctx GSN-Address decode -
CVE-2026-91142
Cockpit: integer overflow in `do_lastlog()` offset calculati -
CVE-2026-84444
libheif uncompressed tiled image encoding allows out-of-boun
V. Comments for CVE-2026-93451
No comments yet