description: A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.
problem types: CWE-400
affected:
{
vendor: n/a
product: zstd
versions:
version: zstd 1.5.4, status: affected
}