high7.5
CVE-2026-44302
Snappier has an infinite loop during SnappyStream decompression with malformed framed input
Impact
Snappier is a high performance C# implementation of the Snappy compression algorithm. Prior to 1.3.1, Snappier.SnappyStream enters an uncatchable infinite loop when decompressing a malformed framed-format Snappy stream as small as 15 bytes. This vulnerability is fixed in 1.3.1.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| nuget | Snappier | <= 1.3.0 | 1.3.1 |