CVE-2022-4899: Facebook Zstandard

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.

Affected products

• Facebook Zstandard: version 1.4.10 only

Published 2023-03-31. Last modified 2026-06-17.