CVE-2022-4899

Description

A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.

Related CPE's

References

https://github.com/facebook/zstd/issues/3200

CvssV3 impact

CvssV2 impact