https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 11:36:09 +0000 https://vulnerability.circl.lu/vuln/rustsec-2022-0051 <p><strong>Affected:</strong> crates.io: lz4-sys</p> <p>lz4-sys up to v1.9.3 bundles a version of liblz4 that is vulnerable to [CVE-2021-3520](https://nvd.nist.gov/vuln/detail/CVE-2021-3520).</p> <p>Attackers could craft a payload that triggers an integer overflow upon decompression, causing an out-of-bounds write.</p> <p>The flaw has been corrected in version v1.9.4 of liblz4, which is included in lz4-sys 1.9.4.</p> <p><strong>Affected:</strong> crates.io: lz4-sys</p> <p>lz4-sys up to v1.9.3 bundles a version of liblz4 that is vulnerable to [CVE-2021-3520](https://nvd.nist.gov/vuln/detail/CVE-2021-3520).</p> <p>Attackers could craft a payload that triggers an integer overflow upon decompression, causing an out-of-bounds write.</p> <p>The flaw has been corrected in version v1.9.4 of liblz4, which is included in lz4-sys 1.9.4.</p> https://vulnerability.circl.lu/vuln/rustsec-2022-0051