High severity7.5NVD Advisory· Published Nov 4, 2026
CVE-2026-122127
CVE-2026-122127
Description
CESNET ipfixcol2 2.7.1 before 2.9.0 contains a heap-based buffer overflow in Lz4Decoder.cpp that allows unauthenticated network peers to write past heap buffers. Attackers can declare a small ring buffer_size followed by a large decompressed_size to write up to 65535 controlled bytes and crash the collector.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
4- github.com/CESNET/ipfixcol2/blob/v2.8.0/src/plugins/input/tcp/src/Lz4Decoder.cppnvd
- github.com/CESNET/ipfixcol2/commit/fd5cb168efb4b864d33f655174711b2779cef502nvd
- github.com/CESNET/ipfixcol2/releases/tag/v2.9.0nvd
- www.vulncheck.com/advisories/cesnet-ipfixcol2-2.7.1-before-2.9.0-heap-buffer-overflow-via-tcp-lz4-decodernvd
News mentions
0No linked articles in our index yet.