Read Memory Access

libarchive.so is vulnerable to denial of service. The function lzmadecodedoes not validate the size parameter sufficiently, allowing an attacker to perform a read memory access and causing an application crash...

CVE-2022-28066

Removed by vendor...

libarchive:libarchive_fuzzer: Crash in lzma_decode

Detailed Report: https://oss-fuzz.com/testcase?key=5182080345178112 Project: libarchive Fuzzing Engine: libFuzzer Fuzz Target: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x632000030000 Crash State: lzmadecode decodebuffer...