CVE-2025-67721
High · 7.5CVSS
7.5
EPSS
0.5%
Published
Dec 12, 2025
CISA due date
—
The record
Aircompressor is a library with ports of the Snappy, LZO, LZ4, and Zstandard compression algorithms to Java. In versions 3.3 and below, incorrect handling of malformed data in Java-based decompressor implementations for Snappy and LZ4 allow remote attackers to read previous buffer contents via crafted compressed input. With certain crafted compressed inputs, elements from the output buffer can end up in the uncompressed output, potentially leaking sensitive data. This is relevant for applications that reuse the same output buffer to uncompress multiple inputs. This can be the case of a web server that allocates a fix-sized buffer for performance purposes. There is similar vulnerability in GHSA-cmp6-m4wj-q63q. This issue is fixed in version 3.4.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Maven | io.airlift:aircompressor | 0 | 2.0.3 |
| Maven | io.airlift:aircompressor-v3 | 0 | 3.4 |
| Chainguard | apache-pulsar-4.0 | 0 | 4.0.9-r2 |
| Chainguard | apache-pulsar-4.1 | 0 | 4.1.3-r2 |
| Chainguard | apache-pulsar-fips-4.0 | 0 | 4.0.9-r1 |
| Chainguard | apache-pulsar-fips-4.1 | 0 | 4.1.3-r1 |
| Chainguard | druid | 0 | 36.0.0-r10 |
| Chainguard | geoserver-2.28 | 0 | 2.28.2-r1 |
| Chainguard | geoserver-2.28-community | 0 | 2.28.2-r1 |
| Chainguard | trino | 0 | 478-r4 |
| Chainguard | trino | 0 | 479-r4 |
| Chainguard | trino-config | 0 | 478-r4 |
| Chainguard | trino-oci-entrypoint | 0 | 478-r4 |
| Chainguard | trino-plugin-accumulo | 0 | 478-r4 |
| Chainguard | trino-plugin-ai-functions | 0 | 478-r4 |
| Chainguard | trino-plugin-atop | 0 | 478-r4 |
| Chainguard | trino-plugin-bigquery | 0 | 478-r4 |
| Chainguard | trino-plugin-blackhole | 0 | 478-r4 |
| Chainguard | trino-plugin-cassandra | 0 | 478-r4 |
| Chainguard | trino-plugin-clickhouse | 0 | 478-r4 |
| Chainguard | trino-plugin-delta-lake | 0 | 478-r4 |
| Chainguard | trino-plugin-druid | 0 | 478-r4 |
| Chainguard | trino-plugin-duckdb | 0 | 478-r4 |
| Chainguard | trino-plugin-elasticsearch | 0 | 478-r4 |
| Chainguard | trino-plugin-example-http | 0 | 478-r4 |
| Chainguard | trino-plugin-exasol | 0 | 478-r4 |
| Chainguard | trino-plugin-exchange-filesystem | 0 | 478-r4 |
| Chainguard | trino-plugin-exchange-hdfs | 0 | 478-r4 |
| Chainguard | trino-plugin-faker | 0 | 478-r4 |
| Chainguard | trino-plugin-faker | 0 | 479-r4 |
| Chainguard | trino-plugin-functions-python | 0 | 478-r4 |
| Chainguard | trino-plugin-geospatial | 0 | 478-r4 |
| Chainguard | trino-plugin-google-sheets | 0 | 478-r4 |
| Chainguard | trino-plugin-hive | 0 | 478-r4 |
| Chainguard | trino-plugin-http-event-listener | 0 | 478-r4 |
| Chainguard | trino-plugin-http-server-event-listener | 0 | 478-r4 |
| Chainguard | trino-plugin-hudi | 0 | 478-r4 |
| Chainguard | trino-plugin-hudi | 0 | 479-r4 |
| Chainguard | trino-plugin-iceberg | 0 | 478-r4 |
| Chainguard | trino-plugin-iceberg | 0 | 479-r4 |
| Chainguard | trino-plugin-ignite | 0 | 478-r4 |
| Chainguard | trino-plugin-jmx | 0 | 478-r4 |
| Chainguard | trino-plugin-kafka | 0 | 478-r4 |
| Chainguard | trino-plugin-kafka-event-listener | 0 | 478-r4 |
| Chainguard | trino-plugin-kinesis | 0 | 478-r4 |
| Chainguard | trino-plugin-kudu | 0 | 478-r4 |
| Chainguard | trino-plugin-lakehouse | 0 | 478-r4 |
| Chainguard | trino-plugin-lakehouse | 0 | 479-r4 |
| Chainguard | trino-plugin-ldap-group-provider | 0 | 478-r4 |
| Chainguard | trino-plugin-local-file | 0 | 478-r4 |
| Chainguard | trino-plugin-loki | 0 | 478-r4 |
| Chainguard | trino-plugin-mariadb | 0 | 478-r4 |
| Chainguard | trino-plugin-memory | 0 | 478-r4 |
| Chainguard | trino-plugin-ml | 0 | 478-r4 |
| Chainguard | trino-plugin-mongodb | 0 | 478-r4 |
| Chainguard | trino-plugin-mysql | 0 | 478-r4 |
| Chainguard | trino-plugin-mysql-event-listener | 0 | 478-r4 |
| Chainguard | trino-plugin-opa | 0 | 478-r4 |
| Chainguard | trino-plugin-openlineage | 0 | 478-r4 |
| Chainguard | trino-plugin-opensearch | 0 | 478-r4 |
| Chainguard | trino-plugin-oracle | 0 | 478-r4 |
| Chainguard | trino-plugin-password-authenticators | 0 | 478-r4 |
| Chainguard | trino-plugin-phoenix5 | 0 | 478-r4 |
| Chainguard | trino-plugin-pinot | 0 | 478-r4 |
| Chainguard | trino-plugin-postgresql | 0 | 478-r4 |
| Chainguard | trino-plugin-prometheus | 0 | 478-r4 |
| Chainguard | trino-plugin-ranger | 0 | 478-r4 |
| Chainguard | trino-plugin-ranger | 0 | 479-r4 |
| Chainguard | trino-plugin-raptor-legacy | 0 | 478-r4 |
| Chainguard | trino-plugin-redis | 0 | 478-r4 |
| Chainguard | trino-plugin-redshift | 0 | 478-r4 |
| Chainguard | trino-plugin-resource-group-managers | 0 | 478-r4 |
| Chainguard | trino-plugin-session-property-managers | 0 | 478-r4 |
| Chainguard | trino-plugin-singlestore | 0 | 478-r4 |
| Chainguard | trino-plugin-snowflake | 0 | 478-r4 |
| Chainguard | trino-plugin-spooling-filesystem | 0 | 478-r4 |
| Chainguard | trino-plugin-sqlserver | 0 | 478-r4 |
| Chainguard | trino-plugin-teradata-functions | 0 | 478-r4 |
| Chainguard | trino-plugin-thrift | 0 | 478-r4 |
| Chainguard | trino-plugin-tpcds | 0 | 478-r4 |
| Chainguard | trino-plugin-tpch | 0 | 478-r4 |
| Chainguard | trino-plugin-vertica | 0 | 478-r4 |
| Wolfi | apache-pulsar-4.1 | 0 | 4.1.3-r2 |
| Wolfi | druid | 0 | 36.0.0-r10 |
| Wolfi | trino | 0 | 478-r4 |
| Wolfi | trino | 0 | 479-r4 |
| Wolfi | trino-config | 0 | 478-r4 |
| Wolfi | trino-oci-entrypoint | 0 | 478-r4 |
| Wolfi | trino-plugin-accumulo | 0 | 478-r4 |
| Wolfi | trino-plugin-ai-functions | 0 | 478-r4 |
| Wolfi | trino-plugin-atop | 0 | 478-r4 |
| Wolfi | trino-plugin-bigquery | 0 | 478-r4 |
| Wolfi | trino-plugin-blackhole | 0 | 478-r4 |
| Wolfi | trino-plugin-cassandra | 0 | 478-r4 |
| Wolfi | trino-plugin-clickhouse | 0 | 478-r4 |
| Wolfi | trino-plugin-delta-lake | 0 | 478-r4 |
| Wolfi | trino-plugin-druid | 0 | 478-r4 |
| Wolfi | trino-plugin-duckdb | 0 | 478-r4 |
| Wolfi | trino-plugin-elasticsearch | 0 | 478-r4 |
| Wolfi | trino-plugin-example-http | 0 | 478-r4 |
| Wolfi | trino-plugin-exasol | 0 | 478-r4 |
| Wolfi | trino-plugin-exchange-filesystem | 0 | 478-r4 |
| Wolfi | trino-plugin-exchange-hdfs | 0 | 478-r4 |
| Wolfi | trino-plugin-faker | 0 | 478-r4 |
| Wolfi | trino-plugin-faker | 0 | 479-r4 |
| Wolfi | trino-plugin-functions-python | 0 | 478-r4 |
| Wolfi | trino-plugin-geospatial | 0 | 478-r4 |
| Wolfi | trino-plugin-google-sheets | 0 | 478-r4 |
| Wolfi | trino-plugin-hive | 0 | 478-r4 |
| Wolfi | trino-plugin-http-event-listener | 0 | 478-r4 |
| Wolfi | trino-plugin-http-server-event-listener | 0 | 478-r4 |
| Wolfi | trino-plugin-hudi | 0 | 478-r4 |
| Wolfi | trino-plugin-hudi | 0 | 479-r4 |
| Wolfi | trino-plugin-iceberg | 0 | 478-r4 |
| Wolfi | trino-plugin-iceberg | 0 | 479-r4 |
| Wolfi | trino-plugin-ignite | 0 | 478-r4 |
| Wolfi | trino-plugin-jmx | 0 | 478-r4 |
| Wolfi | trino-plugin-kafka | 0 | 478-r4 |
| Wolfi | trino-plugin-kafka-event-listener | 0 | 478-r4 |
| Wolfi | trino-plugin-kinesis | 0 | 478-r4 |
| Wolfi | trino-plugin-kudu | 0 | 478-r4 |
| Wolfi | trino-plugin-lakehouse | 0 | 478-r4 |
| Wolfi | trino-plugin-lakehouse | 0 | 479-r4 |
| Wolfi | trino-plugin-ldap-group-provider | 0 | 478-r4 |
| Wolfi | trino-plugin-local-file | 0 | 478-r4 |
| Wolfi | trino-plugin-loki | 0 | 478-r4 |
| Wolfi | trino-plugin-mariadb | 0 | 478-r4 |
| Wolfi | trino-plugin-memory | 0 | 478-r4 |
| Wolfi | trino-plugin-ml | 0 | 478-r4 |
| Wolfi | trino-plugin-mongodb | 0 | 478-r4 |
| Wolfi | trino-plugin-mysql | 0 | 478-r4 |
| Wolfi | trino-plugin-mysql-event-listener | 0 | 478-r4 |
| Wolfi | trino-plugin-opa | 0 | 478-r4 |
| Wolfi | trino-plugin-openlineage | 0 | 478-r4 |
| Wolfi | trino-plugin-opensearch | 0 | 478-r4 |
| Wolfi | trino-plugin-oracle | 0 | 478-r4 |
| Wolfi | trino-plugin-password-authenticators | 0 | 478-r4 |
| Wolfi | trino-plugin-phoenix5 | 0 | 478-r4 |
| Wolfi | trino-plugin-pinot | 0 | 478-r4 |
| Wolfi | trino-plugin-postgresql | 0 | 478-r4 |
| Wolfi | trino-plugin-prometheus | 0 | 478-r4 |
| Wolfi | trino-plugin-ranger | 0 | 478-r4 |
| Wolfi | trino-plugin-ranger | 0 | 479-r4 |
| Wolfi | trino-plugin-raptor-legacy | 0 | 478-r4 |
| Wolfi | trino-plugin-redis | 0 | 478-r4 |
| Wolfi | trino-plugin-redshift | 0 | 478-r4 |
| Wolfi | trino-plugin-resource-group-managers | 0 | 478-r4 |
| Wolfi | trino-plugin-session-property-managers | 0 | 478-r4 |
| Wolfi | trino-plugin-singlestore | 0 | 478-r4 |
| Wolfi | trino-plugin-snowflake | 0 | 478-r4 |
| Wolfi | trino-plugin-spooling-filesystem | 0 | 478-r4 |
| Wolfi | trino-plugin-sqlserver | 0 | 478-r4 |
| Wolfi | trino-plugin-teradata-functions | 0 | 478-r4 |
| Wolfi | trino-plugin-thrift | 0 | 478-r4 |
| Wolfi | trino-plugin-tpcds | 0 | 478-r4 |
| Wolfi | trino-plugin-tpch | 0 | 478-r4 |
| Wolfi | trino-plugin-vertica | 0 | 478-r4 |
Related vulnerabilities
- CVE-2026-33871 Netty is an asynchronous, event-driven network application framework. Also affects apache-pulsar-4.0
- CVE-2026-33870 Netty is an asynchronous, event-driven network application framework. Also affects apache-pulsar-4.0
- CVE-2026-24308 Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and 3.9.4… Also affects apache-pulsar-4.0
- CVE-2026-24281 Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS (PTR)… Also affects apache-pulsar-4.1
- CVE-2026-1605 In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a… Also affects druid
- CVE-2025-59059 Remote Code Execution Vulnerability in NashornScriptEngineCreator is reported in Apache… Also affects druid
- CVE-2025-33042 Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Avro… Also affects druid
- CVE-2026-1002 The Vert.x Web static handler component cache can be manipulated to deny the access to… Also affects druid