355 matches found
lrzip code issue vulnerabilities
lrzip is a compression utility personally developed by Con Kolivas. Versions of lrzip prior to 0.651 contained code vulnerabilities, which stemmed from a null pointer dereferencing issue in the ucompthread function...
lrzip Resource Management Error Vulnerability
lrzip is a compression utility personally developed by Con Kolivas. Versions of lrzip prior to 0.651 contained a resource management vulnerability, which stemmed from the use of the lzmadecompressbuf function, where memory was reclaimed and then reused...
PT-2026-7264
Name of the Vulnerable Software and Affected Versions ckolivas lrzip versions up to 0.651 Description A security issue exists in ckolivas lrzip. The ucompthread function within the stream.c file is susceptible to a null pointer dereference. This manipulation can be performed locally. The exploit...
PT-2026-7262
Name of the Vulnerable Software and Affected Versions lrzip versions up to 0.651 Description A flaw exists in lrzip that involves a use-after-free condition within the lzma decompress buf function located in the stream.c file. Local access is required for exploitation. The exploit has been public...
CVE-2025-15571: NULL Pointer Dereference
A security vulnerability has been detected in ckolivas lrzip up to 0.651. This vulnerability affects the function ucompthread of the file stream.c. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The exploit has been disclosed public...
CVE-2025-15570: Use After Free
A vulnerability was found in ckolivas lrzip up to 0.651. This impacts the function lzmadecompressbuf of the file stream.c. Performing a manipulation results in use after free. Attacking locally is a requirement. The exploit has been made public and could be used. The project was informed of the...
CVE-2021-33451
An issue was discovered in lrzip version 0.641. There are memory leaks in fillbuffer in stream.c...
CVE-2022-33067
Lrzip v0.651 was discovered to contain multiple invalid arithmetic shifts via the functions getmagic in lrzip.c and Predictor::init in libzpaq/libzpaq.cpp. These vulnerabilities allow attackers to cause a Denial of Service via unspecified vectors...
CVE-2022-26291
lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaqdecompressbuf and clearrulist. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted Irz file...
EUVD-2021-20155
Malware in sbrugna...
EUVD-2017-17789
Malware in sbrugna...
EUVD-2017-17788
Malware in sbrugna...
EUVD-2017-17787
Malware in sbrugna...
EUVD-2017-18838
Malware in sbrugna...
EUVD-2017-18839
Malware in sbrugna...
EUVD-2017-17784
Malware in sbrugna...
EUVD-2018-2756
Malware in sbrugna...
EUVD-2021-20157
Malware in sbrugna...