https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-07T13:10:35.702019+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/rustsec-2022-0051 RUSTSEC-2022-0051 — Memory corruption in liblz4 2026-10-07T13:10:35.722066+00:00

Affected: crates.io: lz4-sys

lz4-sys up to v1.9.3 bundles a version of liblz4 that is vulnerable to [CVE-2021-3520](https://nvd.nist.gov/vuln/detail/CVE-2021-3520).

Attackers could craft a payload that triggers an integer overflow upon decompression, causing an out-of-bounds write.

The flaw has been corrected in version v1.9.4 of liblz4, which is included in lz4-sys 1.9.4.