A vulnerability, which was classified as problematic, was found in dain snappy up to 0.4. Affected is the function sun.misc.Unsafe of the component Decompression Handler. The manipulation leads to out-of-bounds read. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is traded as CVE-2024-36124. It is possible to launch the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.