Lucene search
K

11 matches found

OSV
OSV
added 2026/02/10 3:16 p.m.4 views

CVE-2025-15571

A security vulnerability has been detected in ckolivas lrzip up to 0.651. This vulnerability affects the function ucompthread of the file stream.c. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The exploit has been disclosed public...

5.5CVSS5.3AI score
Exploits0References6
CVE
CVE
added 2026/02/10 2:32 p.m.8 views

CVE-2025-15571

Affected software : lrzip by ckolivas, up to version 0.651. Vulnerable component and root cause : within the file stream.c, function ucompthread, leading to a null pointer dereference. Impact and exploitability : local attacker access required; exploitation publicly disclosed. Status and monitori...

5.5CVSS4.6AI score0.00027EPSS
Exploits1References6Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/02/10 1:2 p.m.4 views

CVE-2025-15570

A vulnerability was found in ckolivas lrzip up to 0.651. This impacts the function lzmadecompressbuf of the file stream.c. Performing a manipulation results in use after free. Attacking locally is a requirement. The exploit has been made public and could be used. The project was informed of the...

5.3CVSS5.1AI score0.00009EPSS
Exploits1References6Affected Software1
Cvelist
Cvelist
added 2026/02/10 1:2 p.m.25 views

CVE-2025-15570 ckolivas lrzip stream.c lzma_decompress_buf use after free

A vulnerability was found in ckolivas lrzip up to 0.651. This impacts the function lzmadecompressbuf of the file stream.c. Performing a manipulation results in use after free. Attacking locally is a requirement. The exploit has been made public and could be used. The project was informed of the...

5.3CVSS0.00009EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-25651

Malicious code in bioql PyPI...

5.5CVSS4.1AI score0.00048EPSS
Exploits1References5
NVD
NVD
added 2025/08/24 11:15 p.m.4 views

CVE-2025-9396

A security flaw has been discovered in ckolivas lrzip up to 0.651. This impacts the function GIstrtollinternal of the file strtoll.c. Performing manipulation results in null pointer dereference. The attack is only possible with local access. The exploit has been released to the public and may be...

5.5CVSS0.00048EPSS
Exploits1References5
AlpineLinux
AlpineLinux
added 2025/08/24 10:32 p.m.2 views

CVE-2025-9396

A security flaw has been discovered in ckolivas lrzip up to 0.651. This impacts the function GIstrtollinternal of the file strtoll.c. Performing manipulation results in null pointer dereference. The attack is only possible with local access. The exploit has been released to the public and may be...

5.5CVSS3.7AI score0.00048EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/08/24 12:0 a.m.2 views

lrzip 安全漏洞

lrzip is a compression utility program by the individual developer Con Kolivas. A security vulnerability exists in lrzip version 0.651 and earlier, which stems from a null pointer dereference in the GIstrtollinternal function in the strtoll.c file...

5.5CVSS4.1AI score0.00048EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/08/24 12:0 a.m.4 views

PT-2025-34574 · Ckolivas · Lrzip

Name of the Vulnerable Software and Affected Versions: ckolivas lrzip versions up to 0.651 Description: A security flaw exists in ckolivas lrzip up to version 0.651. The issue resides in the GI strtol l internal function within the strtol l.c file, leading to a null pointer dereference when...

4.8CVSS3.7AI score0.00048EPSS
Exploits1References9
AlpineLinux
AlpineLinux
added 2023/08/17 12:0 a.m.1 views

CVE-2023-39741

lrzip v0.651 was discovered to contain a heap overflow via the libzpaq::PostProcessor::writeint function at /libzpaq/libzpaq.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

5.5CVSS5.6AI score0.00035EPSS
Exploits1
CNNVD
CNNVD
added 2023/08/17 12:0 a.m.1 views

lrzip 缓冲区错误漏洞

lrzip is a compression utility program by the individual developer Con Kolivas. A security vulnerability exists in lrzip version v0.651, which stems from the presence of a heap overflow that allows an attacker to cause a denial of service DoS via a crafted file...

5.5CVSS5.6AI score0.00035EPSS
Exploits1References4
Rows per page
Query Builder