2 matches found
gzip: Fix of CVE-2026-41992
CVE-2026-41992: out-of-bounds read in the LZH decoder from stale shared decompression state left/right reused across a .Z then .lzh file in a single gzip -d invocation...
7.5CVSS6.1AI score0.00415EPSS
SaveExploits0References1
EUVD-2026-40069
GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution. GNU gzip maintains a global array that is shared across the LZ77, LZW, and LZH decompression...
6.9CVSS6AI score0.00415EPSS
SaveExploits0References3
20