CVE-2026-109395 - Ning compress-lzf before 1.2.0 Out-of-Bounds Memory Access via UnsafeChunkDecoder
CVE ID :CVE-2026-109395 Published : Oct. 20, 2026, 1:17 a.m. | 48 minutes ago Description :Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc.Unsafe based UnsafeChunkDecoder that fails to validate back-references and literal runs. Attackers...