CVE-2026-44302: Brantburnett Snappier

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Snappier is a high performance C# implementation of the Snappy compression algorithm. Prior to 1.3.1, Snappier.SnappyStream enters an uncatchable infinite loop when decompressing a malformed framed-format Snappy stream as small as 15 bytes. This vulnerability is fixed in 1.3.1.

Affected products

• Brantburnett Snappier: before 1.3.1 (fixed in 1.3.1)

Published 2026-05-12. Last modified 2026-06-17.