CVE-2022-4899

Description

A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.

Affected Platforms

Weakness Type

CWE-400, CWE-400, CWE-400

References

• https://github.com/facebook/zstd/issues/3200
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro…
• https://security.netapp.com/advisory/ntap-20230725-0005/
• https://github.com/facebook/zstd/issues/3200