CVE-2026-41992

CVE-2026-41992 affects GNU gzip. A global buffer overflow in the LZH decompression path arises from improper reuse of a shared global state across LZ77/LZW/LZH formats within one gzip invocation. Decompressing a crafted LZW file followed by a crafted LZH file in a single gzip -d can poison the sh...