TI-2026-85654 CVE-2026-119434 · GHSA-p9j8-93gx-5h3x
Decompression bomb in ezstd lets attackers exhaust BEAM memory
Priority LOW 30
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in silviucpp ezstd allows an attacker who supplies a zstd frame to ezstd:decompress_using_ddict/2 to exhaust memory and terminate the Erlang…