Is CVE-2026-93452 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-93452?

CVE-2026-93452 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-93452

Description

snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in Snappy.compress(ByteBuffer, ByteBuffer) that writes past the end of the destination buffer. Attackers can supply incompressible data that exceeds the destination buffer's remaining capacity, corrupting off-heap memory and causing JVM termination.