GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer. This may lead to denial of service of the Okio client when handling a crafted GZIP archive, by using the GzipSource class.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| com.squareup.okio:okio(Maven) | 2.0.0-RC1 | 3.4.0 | N/A |
| com.squareup.okio:okio(Maven) | 0 | 1.17.6 | N/A |
| com.squareup.okio:okio-jvm(Maven) | 2.0.0-RC1 | 3.4.0 | N/A |
CVSS Metrics
