⤷ Title: High-Severity lz4-java Flaw (CVE-2025-66566) Leaks Uninitialized Memory During Decompression
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 00:26:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Compression #CVE_2025_66566 #Information Disclosure #Java security #lz4_java #Memory Leak #Uninitialized Buffer
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 00:26:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Compression #CVE_2025_66566 #Information Disclosure #Java security #lz4_java #Memory Leak #Uninitialized Buffer
Daily CyberSecurity
High-Severity lz4-java Flaw (CVE-2025-66566) Leaks Uninitialized Memory During Decompression
A High-severity flaw (CVE-2025-66566) in lz4-java allows remote attackers to read uninitialized memory (passwords/keys) from recycled buffers during decompression. Update to v1.10.1 immediately.