CVE-2019-11922

Publication date

2019-07-25 20:32:44

Family

facebook

State

PUBLISHED

Description

A race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could allow an attacker to write bytes out of bounds if an output buffer smaller than the recommended size was used.