aircompressor vulnerabilities

2 known vulnerabilities in aircompressor from Airlift. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  aircompressor: Out-of-bounds Read

  CVE-2025-67721Dec 12, 2025Airlift

  Aircompressor is a library with ports of the Snappy, LZO, LZ4, and Zstandard compression algorithms to Java. In versions 3.3 and below, incorrect handling of malformed data in Java-based decompressor implementations for Snappy and LZ4 allow remote attackers to

• 8.6 High severity

  aircompressor: Out-of-bounds Read

  CVE-2024-36114May 29, 2024Airlift

  Aircompressor is a library with ports of the Snappy, LZO, LZ4, and Zstandard compression algorithms to Java. All decompressor implementations of Aircompressor (LZ4, LZO, Snappy, Zstandard) can crash the JVM for certain input, and in some cases also leak the co