CVE-2019-11922 Vulnerability Details

  /     /     /  

CVE-2019-11922 Metadata Quick Info

CVE Published: 25/07/2019 | CVE Updated: 04/08/2024 | CVE Year: 2019
Source: facebook | Vendor: Facebook | Product: Zstandard
Status : PUBLISHED

---

CVE-2019-11922 Description

A race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could allow an attacker to write bytes out of bounds if an output buffer smaller than the recommended size was used.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Out-of-bounds Write (CWE-ID 787)
Source: Facebook

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).