CVE-2019-11922

A race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could allow an attacker to write bytes out of bounds if an output…

published July 25, 2019

CVSS
—
EPSS
1%
Percentile
72.6
In the wild
Unconfirmed
What it is

A race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could allow an attacker to write bytes out of bounds if an output buffer smaller than the recommended size was used.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01419 · 72.6th percentile
Published
2019-07-25T20:32Z
EPSS history
Timeline
  • 25 JUL 20:32Z
    A race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could allow an attacker to write bytes out of bounds if an output…
    cvelistv5