p PatchFirst

CVE-2026-116590

CVE-2026-116590 · snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWrite

This page contains facts from public vulnerability sources. Check the original advisory before updating.

snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. Prior to 1.1.10.9, Snappy.arrayCopy(Object src, int offset, int byteLength, Object dest, int destOffset) passes caller-supplied ranges to native memcpy without validating either array, allowing negative or oversized byteLength and offset values to read or write outside array bounds and crash the JVM. SnappyOutputStream.rawWrite and SnappyInputStream.rawRead, including their typed-array write and read methods, pass caller-controlled ranges through this primitive, and typed-array byte-size calculations can overflow int. This issue is fixed in version 1.1.10.9.

CVSS 5.9 · Medium · EPSS 0.4%

Published
Updated

Stack: system

Affected products and versions

  • snappy-java

    Versions
    • < 1.1.10.9: Affected

    No fix published

  • snappy-java Debian:12

    Versions
    • 1.1.10.5-1
    • 1.1.10.5-2
    • 1.1.10.7-1
    • 1.1.10.8-1
    • 1.1.8.3-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • snappy-java Debian:13

    Versions
    • 1.1.10.7-1
    • 1.1.10.8-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • snappy-java Debian:14

    Versions
    • 1.1.10.7-1
    • 1.1.10.8-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • snappy-java Ubuntu:14.04:LTS

    Versions
    • 1.0.4.1~dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • snappy-java Ubuntu:16.04:LTS

    Versions
    • 1.1.1.7-2
    • 1.1.2-1
    • 1.1.2.1-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • snappy-java Ubuntu:18.04:LTS

    Versions
    • 1.1.4-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • snappy-java Ubuntu:20.04:LTS

    Versions
    • 1.1.7.2-1
    • 1.1.7.3-1
    • 1.1.7.3-1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • snappy-java Ubuntu:22.04:LTS

    Versions
    • 1.1.8.3-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • snappy-java Ubuntu:24.04:LTS

    Versions
    • 1.1.8.3-1
    • 1.1.10.5-1
    • 1.1.10.5-1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • snappy-java Ubuntu:26.10

    Versions
    • 1.1.10.8-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • snappy-java Ubuntu:26.04:LTS

    Versions
    • 1.1.10.7-1
    • 1.1.10.8-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →