CVE-2025-12183
org.lz4:lz4-java - Out-of-Bounds Memory Access
Summary
org.lz4:lz4-java - Out-of-Bounds Memory Access
Original description
The description as published by the source.
Out-of-bounds memory operations in org.lz4:lz4-java 1.8.0 and earlier allow remote attackers to cause denial of service and read adjacent memory via untrusted compressed input.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2025-12183 lz4-java
- Ubuntu UBUNTU-CVE-2025-12183 lz4-java
References
- advisory github.com
- advisory nvd.nist.gov
- advisory sonatype.com
- patch github.com
- web openwall.com
- web repo1.maven.org