Xerial

10 CVEs across 2 Xerial products. Browse Xerial vulnerabilities, severities, and proof-of-concept exploits.

Xerial products with known CVEs

ProductCVEs
Snappy-Java9
Sqlite-Jdbc1
Xerial CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-108106High7.52026-10-09Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows attackers to exhaust JVM memory by declaring a large uncom…
CVE-2026-108104Medium4.82026-10-09Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled buffers twice when repl…
CVE-2026-93452High7.52026-09-18snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in Snappy.compress(ByteBuffer, ByteBuffer) that writes past the end of the destination bu…
CVE-2026-93451Medium6.52026-09-18snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in typed Snappy.uncompress*Array methods that allocate output arrays by dividing uncompre…
CVE-2026-90559High7.52026-09-12snappy-java through 1.1.10.8 contains an out-of-bounds write vulnerability in Snappy.uncompress(ByteBuffer, ByteBuffer) because destination buffer capacity is…
CVE-2023-43642High7.52023-09-25snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. The SnappyInputStream was found to be vulnerable to Denial of…
CVE-2023-34455High7.52023-06-15snappy-java is a fast compressor/decompressor for Java. Due to use of an unchecked chunk length, an unrecoverable fatal error can occur in versions prior to 1…
CVE-2023-34454Medium5.92023-06-15snappy-java is a fast compressor/decompressor for Java. Due to unchecked multiplications, an integer overflow may occur in versions prior to 1.1.10.1, causing…
CVE-2023-34453Medium5.92023-06-15snappy-java is a fast compressor/decompressor for Java. Due to unchecked multiplications, an integer overflow may occur in versions prior to 1.1.10.1, causing…
CVE-2023-32697High8.82023-05-23SQLite JDBC is a library for accessing and creating SQLite database files in Java. Sqlite-jdbc addresses a remote code execution vulnerability via JDBC URL. Th…