Description
LZ4 bindings use a deprecated C API that is vulnerable to memory corruption, which could lead to arbitrary code execution if called with untrusted user input.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
github.com/cloudflare/golz4 github.com/cloudflare/golz4
Default version status: unaffected
0 to < 0.0.0-20140711154735-199f5f787806affected