Junglewise Threat Intelligence

CVE-2025-12183: LZ4 Java Compression has Out-of-bounds memory operations which can cause DoS

CVE-2025-12183 · Severity: medium · CVSS 4 · Published 2025-11-28

Technologies: org.lz4:lz4-java (Maven), at.yawk.lz4:lz4-java (Maven). Vendors: Maven.

Executive brief

LZ4 Java Compression has Out-of-bounds memory operations which can cause DoS

Affected products

  • Maven net.jpountz.lz4:lz4
  • Maven org.lz4:lz4-java
  • Maven at.yawk.lz4:lz4-java
  • Maven org.lz4:lz4-pure-java

Related threats