LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize), affecting applications that call LZ4_compress_fast with a large input. (This issue can also lead to data corruption.) NOTE: the vendor states "only a few specific / uncommon usages of the API are at risk."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade lz4-libsUpgrade lz4Upgrade lz4-devel | Aug 4, 2025 | Jul 15, 2025 |
| Alpine Linux | — | Upgrade lz4 | Mar 26, 2024 | Oct 14, 2019 |
| Debian | — | Upgrade lz4 | Jul 30, 2024 | Oct 14, 2019 |
| Freebsd | — | Upgrade mariadb103-serverUpgrade mariadb104-serverUpgrade mysql80-serverUpgrade mysql57-serverUpgrade mariadb105-server | Nov 4, 2022 | Jul 20, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade lz4 | Dec 4, 2019 | Oct 14, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade lz4 | Dec 18, 2019 | Oct 14, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade lz4 | Dec 11, 2019 | Oct 14, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade lz4-develUpgrade lz4-libsUpgrade lz4 | Nov 28, 2019 | Oct 14, 2019 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 10, 2025 |
| Oracle Mysql | — | Upgrade to MySQL version 5.7.35Upgrade to MySQL version 8.0.26 | Jun 15, 2026 | Oct 14, 2019 |
| Oracle Solaris | — | Upgrade database/mysql-57/client to version 5.7.35-11.4.38.0.1.101.1 on Solaris 11.4Upgrade database/mysql-57/tests to version 5.7.35-11.4.38.0.1.101.1 on Solaris 11.4Upgrade database/mysql-57/embedded to version 5.7.35-11.4.38.0.1.101.1 on Solaris 11.4Upgrade database/mysql-57 to version 5.7.35-11.4.38.0.1.101.1 on Solaris 11.4Upgrade database/mysql-57/library to version 5.7.35-11.4.38.0.1.101.1 on Solaris 11.4 | Nov 17, 2021 | Oct 14, 2019 |
| Oracle_linux | — | Upgrade lz4Upgrade lz4-develUpgrade lz4-libs | Jul 16, 2025 | Jul 17, 2019 |
| Redhat_linux | — | Upgrade lz4-libs-debuginfoUpgrade lz4-develUpgrade lz4-debuginfoUpgrade lz4-debugsourceUpgrade lz4Upgrade lz4-libsNo solution exists | Jul 9, 2025 | Oct 14, 2019 |
| Rocky_linux | — | Upgrade lz4-libs-debuginfoUpgrade lz4-libsUpgrade lz4-debuginfoUpgrade lz4-develUpgrade lz4-debugsourceUpgrade lz4 | Feb 5, 2026 | Jul 29, 2025 |
| Suse | — | Upgrade liblz4-1-32bitUpgrade liblz4-1Upgrade liblz4-develUpgrade lz4 | Oct 30, 2019 | Oct 14, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 14, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub