CVE-2014-125026

Publication date

2022-12-27 21:13:06

Family

Go

State

PUBLISHED

Description

LZ4 bindings use a deprecated C API that is vulnerable to memory corruption, which could lead to arbitrary code execution if called with untrusted user input.