{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-21T13:45:39.301","vulnerabilities":[{"cve":{"id":"CVE-2019-11922","sourceIdentifier":"cve-assign@fb.com","published":"2019-07-25T21:15:11.600","lastModified":"2026-06-17T02:13:50.390","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could allow an attacker to write bytes out of bounds if an output buffer smaller than the recommended size was used."},{"lang":"es","value":"Una condición de carrera en las funciones de compresión de un paso (one-pass) de Zstandard anterior a versión 1.3.8, podría permitir a un atacante escribir bytes fuera de límites si es utilizado un búfer de salida más pequeño que el tamaño recomendado ."}],"affected":[{"source":"cve-assign@fb.com","affectedData":[{"vendor":"Facebook","product":"Zstandard","versions":[{"version":"1.3.8","status":"affected"},{"version":"unspecified","lessThan":"1.3.8","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:facebook:zstandard:*:*:*:*:*:*:*:*","versionEndExcluding":"1.3.8","matchCriteriaId":"56E5C2FA-164D-43B1-9658-D71EEE840B0F"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00008.html","source":"cve-assign@fb.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00062.html","source":"cve-assign@fb.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00078.html","source":"cve-assign@fb.com"},{"url":"https://github.com/facebook/zstd/pull/1404/commits/3e5cdf1b6a85843e991d7d10f6a2567c15580da0","source":"cve-assign@fb.com","tags":["Patch","Third Party Advisory"]},{"url":"https://usn.ubuntu.com/4108-1/","source":"cve-assign@fb.com"},{"url":"https://www.facebook.com/security/advisories/cve-2019-11922","source":"cve-assign@fb.com","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","source":"cve-assign@fb.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00062.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00078.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/facebook/zstd/pull/1404/commits/3e5cdf1b6a85843e991d7d10f6a2567c15580da0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://usn.ubuntu.com/4108-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.facebook.com/security/advisories/cve-2019-11922","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}