CVE advisoryCRITICAL
CVE-2021-3520
LZ4 Integer Overflow Allows Out-of-Bounds Write and Denial of Service
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A flaw in the lz4 compression library can allow an attacker to trigger an integer overflow by submitting a crafted file. This could lead to an out-of-bounds write or application crash, impacting availability and potentially confidentiality and integrity. This issue is relevant due to lz4's widespread use in various sof