Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Zstandard library: Data corruption or crash when decompressing certain files
published 3 years ago
Summary
A bug in the Zstandard library can cause a crash or data corruption when decompressing specific files. This issue affects applications that use the Zstandard library to decompress data. To mitigate this issue, update to the latest version of the Zstandard library.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| OSS-Fuzz | – | c-blosc2 | All versions |
Original advisory text
Heap-buffer-overflow in ZSTD_decompressSequencesLong_bmi2
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58035
```
Crash type: Heap-buffer-overflow READ 8
Crash state:
ZSTD_decompressSequencesLong_bmi2
ZSTD_decompressSequencesLong
ZSTD_decompressBlock_internal
```
```
Crash type: Heap-buffer-overflow READ 8
Crash state:
ZSTD_decompressSequencesLong_bmi2
ZSTD_decompressSequencesLong
ZSTD_decompressBlock_internal
```
References
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58035 Third Party Advisory
Timeline
Published16 Apr 2023
Updated6 Mar 2026
First seen6 Mar 2026
Sources
OSV-2023-319 · OSV
Track software like this
Free during beta