CVE-2019-11922

CVE-2019-11922: vulnerability in Facebook Zstandard

Published · Updated

Follow this CVE+ Monitor Zstandard+ Monitor libzstd

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.4%
A race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could allow an attacker to write bytes out of bounds if an output buffer smaller than the recommended size was used.
Affected products
Facebook · Zstandard
Related CVEs — Facebook Zstandard

In the same product, most dangerous first.

CVE-2021-24031—CVE-2021-24031EPSS 0.5%CVE-2021-24032—CVE-2021-24032EPSS 0.3%