Lucene search

K
cvelistMitreCVELIST:CVE-2022-26291
HistoryMar 28, 2022 - 9:52 p.m.

CVE-2022-26291

2022-03-2821:52:42
mitre
www.cve.org
7
lrzip vulnerability
use-after-free
dos
irz file

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

33.5%

lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaq_decompress_buf() and clear_rulist(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted Irz file.

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

33.5%