All 2 CVE vulnerabilities found in lz4-java, with AI-generated Chinese analysis, references, and POCs.
Vendor: yawkat
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-59949 | yawkat LZ4 Java: JVM Crash via Null Byte Array in lz4-java Streaming XXHash JNI (StreamingXXHash32JNI / StreamingXXHash64JNI) CWE-476 | 6.5 | Medium | 2026-08-18 |
| CVE-2025-66566 | yawkat LZ4 Java has a possible information leak in Java safe decompressor CWE-201 | 7.5 | - | 2025-12-05 |
All 2 known CVE vulnerabilities affecting lz4-java with full Chinese analysis, references, and POCs where available.