Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows attackers to exhaust JVM memory by declaring a large uncompressed length in compressed input. Attackers can supply a few crafted bytes to Snappy.uncompress, uncompressString, SnappyInputStream or SnappyFramedInputStream to force allocations up to 2 GB, causing OutOfMemoryError and denial of service.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows
    attackers to exhaust JVM memory by declaring a large uncompressed length in compressed input. Attackers
    can supply a few crafted bytes to Snappy.uncompress, uncompressString, SnappyInputStream or
    SnappyFramedInputStream to force allocations up to 2 GB, causing OutOfMemoryError and denial of service.
    (CVE-2026-108106)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows     attackers to exhaust JVM memory by declaring a large uncompressed length in compressed input. Attackers     can supply a few crafted bytes to Snappy.uncompress, uncompressString, SnappyInputStream or     SnappyFramedInputStream to force allocations up to 2 GB, causing OutOfMemoryError and denial of service.
    (CVE-2026-108106)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
477613	SCA: security update for org.xerial.snappy:snappy-java (GHSA-q233-g92q-qxp6)	Tenable Cloud Security	SCA Checks	Local	high
477613	SCA: security update for org.xerial.snappy:snappy-java (GHSA-q233-g92q-qxp6)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
364535	Linux Distros Unpatched Vulnerability : CVE-2026-108106	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-108106

high

Tenable Plugins

high

high

high