CVE-2025-12183
CVE-2025-12183
Out-of-bounds memory operations in org.lz4:lz4-java 1.8.0 and earlier allow remote attackers to cause denial of service and read adjacent memory via untrusted compressed input.
Vulnerability class: Buffer Overflow
EPSS: 0.007 (49.7th percentile) — read the EPSS interpretation.
Weakness classification (CWE)
References
- 103e4ec9-0a87-450b-af77-479448ddef11 (third-party-advisory)
- 103e4ec9-0a87-450b-af77-479448ddef11 (patch)
- af854a3a-2127-422b-91ae-364da2661108