CVE-2026-122127 | CESNET ipfixcol2 up to 2.8.x Lz4 Decoder Lz4Decoder.cpp buffer_size/decompressed_size buffer overflow

November 4, 2026 Yanac

A vulnerability classified as critical has been found in CESNET ipfixcol2 up to 2.8.x. This affects an unknown part of the file Lz4Decoder.cpp of the component Lz4 Decoder. The manipulation of the argument buffer_size/decompressed_size leads to buffer overflow.

This vulnerability is listed as CVE-2026-122127. The attack may be initiated remotely. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More