ByteOS Network

CVE Vulnerability Details :

CVE-2026-44302

PUBLISHED

More Info Official Page

Assigner-GitHub_M

Assigner Org ID-a0819718-46f1-4df5-94e2-005712e83aaa

Published At-12 May, 2026 | 21:33

Updated At-12 May, 2026 | 21:33

▼CVE Numbering Authority (CNA)

Snappier: Infinite loop in SnappyStream decompression on malformed framed input

Snappier is a high performance C# implementation of the Snappy compression algorithm. Prior to 1.3.1, Snappier.SnappyStream enters an uncatchable infinite loop when decompressing a malformed framed-format Snappy stream as small as 15 bytes. This vulnerability is fixed in 1.3.1.

Affected Products

Vendor

brantburnett

Product

Snappier

Versions

Affected

< 1.3.1

Problem Types

Type	CWE ID	Description
CWE	CWE-835	CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')

Type: CWE

CWE ID: CWE-835

Description: CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')

Metrics

Version	Base score	Base severity	Vector
3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Version: 3.1

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

Hyperlink	Resource
https://github.com/brantburnett/Snappier/security/advisories/GHSA-pggp-6c3x-2xmx	x_refsource_CONFIRM

Hyperlink: https://github.com/brantburnett/Snappier/security/advisories/GHSA-pggp-6c3x-2xmx

Resource:

x_refsource_CONFIRM

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References