Attributed metadata history
Up to 100 retained publisher events per page for CVE-2021-3520. Withdrawals and unavailable references remain attributed to their publishers.
nvd
observed · 2026-10-12 06:57:10 UTC
There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling of memmove() on a negative size argument, causing an out-of-bounds write and/or a crash. The greatest impact of this flaw is to availability, with some potential impact to confidentiality and integrity as well.
Fingerprint: b21600cc432e8502146183719dd89fb1bbff6328fe18b91013b12752859a6e7c
nvd
available · 2026-10-12 04:02:58 UTC
available
Fingerprint: 1a480b1c570dfec82c1cc39b732387360c17935637e0981c7b0fd9c8798dc341