Cloudanix VulnDB

CVE-2025-12183

None

CVSS

—

EPSS

0.7%

Published

Nov 28, 2025

CISA due date

—

The record

Out-of-bounds memory operations in org.lz4:lz4-java 1.8.0 and earlier allow remote attackers to cause denial of service and read adjacent memory via untrusted compressed input.

Affected packages

Ecosystem Package Introduced Fixed
Maven at.yawk.lz4:lz4-java 0 1.8.1
Maven net.jpountz.lz4:lz4 0 No fix
Maven org.lz4:lz4-java 0 1.8.1
Maven org.lz4:lz4-pure-java 0 No fix
Chainguard apache-hop 0 2.17.0-r5
Chainguard apache-hop-fips 0 2.17.0-r5
Chainguard cassandra-4.0 0 4.0.19-r5
Chainguard cassandra-4.1 0 4.1.10-r5
Chainguard cassandra-fips-4.0 0 4.0.19-r4
Chainguard cassandra-fips-4.1 0 4.1.10-r4
Chainguard cassandra-fips-5.0 0 5.0.6-r5
Chainguard debezium-connector-ibmi-3.5 0 3.5.0-r1
Chainguard debezium-connector-informix-3.5 0 3.5.0-r1
Chainguard debezium-connector-spanner-3.4 0 3.4.2-r1
Chainguard kafka-3.7 0 3.7.2-r53
Chainguard kafka-3.8 0 3.8.1-r52
Chainguard kafka-4.0 0 4.0.1-r8
Chainguard kafka-4.1 0 4.1.1-r7
Chainguard kafka-fips-4.1 0 4.1.1-r3
Chainguard knative-kafka-broker-1.17-dispatcher-loom 0 1.17.3-r6
Chainguard knative-kafka-broker-1.17-receiver-loom 0 1.17.3-r6
Chainguard knative-kafka-broker-1.18-dispatcher-loom 0 1.18.2-r1
Chainguard knative-kafka-broker-1.18-receiver-loom 0 1.18.2-r1
Chainguard knative-kafka-broker-1.19-dispatcher-loom 0 1.19.11-r2
Chainguard knative-kafka-broker-1.19-receiver-loom 0 1.19.11-r2
Chainguard knative-kafka-broker-1.20-dispatcher-loom 0 1.20.2-r2
Chainguard knative-kafka-broker-1.20-receiver-loom 0 1.20.2-r2
Chainguard knative-kafka-broker-1.21-dispatcher-loom 0 1.21.1-r1
Chainguard knative-kafka-broker-1.21-receiver-loom 0 1.21.1-r1
Chainguard logstash-8.17 0 8.17.10-r18
Chainguard logstash-8.17-iamguarded-compat 0 8.17.10-r18
Chainguard logstash-8.17-with-output-opensearch 0 8.17.10-r18
Chainguard logstash-9.0 0 9.0.8-r17
Chainguard logstash-9.0-iamguarded-compat 0 9.0.8-r17
Chainguard logstash-9.0-with-output-opensearch 0 9.0.8-r17
Chainguard opensearch-2-security 0 2.19.4-r12
Chainguard spark-3.5-scala-2.12 0 3.5.8-r5
Chainguard spark-3.5-scala-2.13 0 3.5.8-r5
Chainguard spark-4.0-scala-2.13 0 4.0.2-r4
Chainguard spark-4.1-scala-2.13 0 4.1.1-r8
Chainguard spark-fips-3.5-scala-2.12 0 3.5.4-r24
Chainguard spark-fips-3.5-scala-2.13 0 3.5.4-r24
Chainguard spark-fips-4.1-scala-2.13 0 4.1.1-r5
Chainguard strimzi-kafka-operator-kafka-thirdparty-libs-cc 0 0.51.0-r2
Chainguard zipkin 0 3.5.1-r13
Wolfi cassandra-4.1 0 4.1.10-r5
Wolfi debezium-connector-ibmi-3.5 0 3.5.0-r1
Wolfi debezium-connector-informix-3.5 0 3.5.0-r1
Wolfi debezium-connector-spanner-3.4 0 3.4.2-r1
Wolfi kafka-3.8 0 3.8.1-r52
Wolfi kafka-4.0 0 4.0.1-r8
Wolfi kafka-4.1 0 4.1.1-r7
Wolfi opensearch-2-security 0 2.19.4-r12
Wolfi spark-3.5-scala-2.12 0 3.5.8-r5
Wolfi spark-3.5-scala-2.13 0 3.5.8-r5
Wolfi spark-4.0-scala-2.13 0 4.0.2-r4
Wolfi spark-4.1-scala-2.13 0 4.1.1-r8
Wolfi strimzi-kafka-operator-kafka-thirdparty-libs-cc 0 0.51.0-r2
Wolfi zipkin 0 3.5.1-r13
openSUSE:Tumbleweed grype 0 0.109.1-1.1

Related vulnerabilities