{
  "cveId": "CVE-2019-11922",
  "url": "https://patchblox.com/security/cve/CVE-2019-11922",
  "summary": "CVE-2019-11922 is fixed in 2 products on 1 platform, first by libzstd1 1.3.3\u002Bdfsg-2ubuntu1.1, released July 24, 2019. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "libzstd1: A race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could allow an attacker to...",
  "description": "A race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could allow an attacker to write bytes out of bounds if an output buffer smaller than the recommended size was used.",
  "published": "2019-07-24T17:00:00Z",
  "severity": "Medium",
  "epss": 0.01419,
  "epssPercentile": 0.7296,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "libzstd1",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.3.3\u002Bdfsg-2ubuntu1.1",
      "fix": "libzstd1 1.3.3\u002Bdfsg-2ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libzstd1-1.3.3-dfsg-2ubuntu1.1",
      "released": "2019-07-24T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "zstd",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.3.3\u002Bdfsg-2ubuntu1.1",
      "fix": "zstd 1.3.3\u002Bdfsg-2ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-zstd-1.3.3-dfsg-2ubuntu1.1",
      "released": "2019-07-24T17:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}