Vulnerabilities in xerial
8 resultsVexday analysis
O Xerial apresenta um perfil de risco baixo com apenas 5 vulnerabilidades catalogadas e nenhuma sob exploração ativa ou com severidade crítica. A fraqueza predominante (CWE-190, estouro de inteiro) é de natureza técnica contida, e a ausência de divulgações recentes indica estabilização da superfície de ataque.
CVE-2023-34455HIGHsnappy-java's unchecked chunk length leads to DoSEPSS 1.8%CVE-2023-34453MEDIUMsnappy-java's Integer Overflow vulnerability in shuffle leads to DoSEPSS 1.7%CVE-2023-32697HIGHSqlite-jdbc vulnerable to remote code execution when JDBC url is attacker controlledEPSS 1.6%CVE-2023-34454MEDIUMsnappy-java's Integer Overflow vulnerability in compress leads to DoSEPSS 1.5%CVE-2023-43642HIGHMissing upper bound check on chunk length in snappy-java EPSS 1.0%CVE-2026-93452HIGHsnappy-java through 1.1.10.8 Buffer Overflow in Snappy.compressEPSS 0.5%CVE-2026-90559HIGHsnappy-java through 1.1.10.8 Out-of-Bounds Write via uncompressEPSS 0.4%CVE-2026-93451MEDIUMsnappy-java through 1.1.10.8 Buffer Overflow via typed uncompress methodsEPSS 0.3%