lz4_flex vulnerabilities

CVEs whose affected-version data names the lz4_flex package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-32829High· 7.5

6mo ago

lz4_flex is a pure Rust implementation of LZ4 compression/decompression

lz4_flex is a pure Rust implementation of LZ4 compression/decompression. In versions 0.11.5 and below, and 0.12.0, decompressing invalid LZ4 data can leak sensitive information from uninitialized memory or from previous decompression op…

▾ Twilightpseitz · lz4_flexEPSS 0.61%via NVD