CVE-2026-93452
CVE-2026-93452: 1 tracked advisory record across Red Hat. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Red Hat
1 advisory- Advisory severityHigh7.5
High [CVE-2026-93452] Denial of Service due to buffer overflow in Snappy.compress
CVE-2026-93452Source published Source updated
snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in Snappy.compress(ByteBuffer, ByteBuffer) that writes past the end of the destination buffer. Attackers can supply incompressible data that exceeds the destination buffer's remaining capacity, corrupting off-heap memory and causing JVM termination. An attacker can trigger a buffer overflow vulnerability in the `Snappy.compress(ByteBuffer, ByteBuffer)` function by providing specially crafted, incompressible data. The corruption ultimately leads to the termination of the Java Virtual Machine (JVM), resulting in a denial of service. A flaw in snappy-java allows an attacker to terminate an application JVM when attacker-controlled, incompressible data is passed to Snappy.compress(ByteBuffer, ByteBuffer) with an undersized…
- Affected products in this advisory
- Red Hat build of Apache Camel 4 for Quarkus 3
- Red Hat build of Apache Camel for Spring Boot 4
- Red Hat build of Apicurio Registry 3
- Red Hat build of Debezium 3
8 more entries in the full advisory.
- Source-reported affected versions
- 1.1.10.8
- Source-reported fixed versions
- No fixed-version detail extracted. This does not mean no fix exists.
- Mitigation guidance
- Validate destination buffer capacity against maximum theoretical compressed payload size prior to invoking Snappy.compress, or restrict untrusted compressed input vectors at network application boundaries.
Android app · Google Play
Monitor future Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.