xerial

Products

ProductCVEsExploitedLatest
snappy-java10–Oct 26, 2026
sqlite-jdbc1–May 23, 2023

Exploited and recent CVEs

  • CVE-2026-116590 Medium 5.9 snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWrite 0.4%
  • CVE-2026-108106 High 7.5 Xerial snappy-java before 1.1.10.9 Unbounded Memory Allocation Denial of Service 0.4%
  • CVE-2026-108104 Medium 4.8 Xerial snappy-java 1.1.7.4 before 1.1.10.10 Double Release of Pooled Buffers in SnappyFramedInputStream 0.2%
  • CVE-2026-93452 High 7.5 snappy-java through 1.1.10.8 Buffer Overflow in Snappy.compress 0.7%
  • CVE-2026-93451 Medium 6.5 snappy-java through 1.1.10.8 Buffer Overflow via typed uncompress methods 0.3%
  • CVE-2026-90559 High 7.5 snappy-java through 1.1.10.8 Out-of-Bounds Write via uncompress 0.6%
  • CVE-2023-43642 High 7.5 Missing upper bound check on chunk length in snappy-java 1.2%
  • CVE-2023-34455 High 7.5 snappy-java's unchecked chunk length leads to DoS 1.8%
  • CVE-2023-34454 Medium 5.9 snappy-java's Integer Overflow vulnerability in compress leads to DoS 1.5%
  • CVE-2023-34453 Medium 5.9 snappy-java's Integer Overflow vulnerability in shuffle leads to DoS 1.7%
  • CVE-2023-32697 High 8.8 Sqlite-jdbc vulnerable to remote code execution when JDBC url is attacker controlled 1.6%