Skip to content

io.airlift:aircompressor vulnerabilities (Red Hat Lightwell)

2 vulnerabilities.

io.airlift:aircompressor Red Hat LightwellAircompressor's Snappy and LZ4 Java-based decompressor implementation can leak information from reused output bufferCVE-2025-67721Fix available6.3 MediumDecember 12, 2025
io.airlift:aircompressor Red Hat LightwellDecompressors can crash the JVM and leak memory content in AircompressorCVE-2024-36114Public exploitFix available8.6 HighMay 29, 2024