xerial CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM xerial CVE published 2026-09-18

CVE-2026-93451

CVE-2026-93451 is a buffer overflow vulnerability in snappy-java through 1.1.10.8. The vulnerability exists in the typed Snappy.uncompress*Array methods, which allocate output arrays by dividing the uncompressed length by element size but pass the undivided length to native code. This allows attackers controlling compressed input to cause misaligned length values, writing past array bounds with attacker-c [truncated]