11 matches found
CVE-2025-15571
A security vulnerability has been detected in ckolivas lrzip up to 0.651. This vulnerability affects the function ucompthread of the file stream.c. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The exploit has been disclosed public...
CVE-2025-15571
Affected software : lrzip by ckolivas, up to version 0.651. Vulnerable component and root cause : within the file stream.c, function ucompthread, leading to a null pointer dereference. Impact and exploitability : local attacker access required; exploitation publicly disclosed. Status and monitori...
CVE-2025-15570
A vulnerability was found in ckolivas lrzip up to 0.651. This impacts the function lzmadecompressbuf of the file stream.c. Performing a manipulation results in use after free. Attacking locally is a requirement. The exploit has been made public and could be used. The project was informed of the...
CVE-2025-15570 ckolivas lrzip stream.c lzma_decompress_buf use after free
A vulnerability was found in ckolivas lrzip up to 0.651. This impacts the function lzmadecompressbuf of the file stream.c. Performing a manipulation results in use after free. Attacking locally is a requirement. The exploit has been made public and could be used. The project was informed of the...
EUVD-2025-25651
Malicious code in bioql PyPI...
CVE-2025-9396
A security flaw has been discovered in ckolivas lrzip up to 0.651. This impacts the function GIstrtollinternal of the file strtoll.c. Performing manipulation results in null pointer dereference. The attack is only possible with local access. The exploit has been released to the public and may be...
CVE-2025-9396
A security flaw has been discovered in ckolivas lrzip up to 0.651. This impacts the function GIstrtollinternal of the file strtoll.c. Performing manipulation results in null pointer dereference. The attack is only possible with local access. The exploit has been released to the public and may be...
lrzip 安全漏洞
lrzip is a compression utility program by the individual developer Con Kolivas. A security vulnerability exists in lrzip version 0.651 and earlier, which stems from a null pointer dereference in the GIstrtollinternal function in the strtoll.c file...
PT-2025-34574 · Ckolivas · Lrzip
Name of the Vulnerable Software and Affected Versions: ckolivas lrzip versions up to 0.651 Description: A security flaw exists in ckolivas lrzip up to version 0.651. The issue resides in the GI strtol l internal function within the strtol l.c file, leading to a null pointer dereference when...
CVE-2023-39741
lrzip v0.651 was discovered to contain a heap overflow via the libzpaq::PostProcessor::writeint function at /libzpaq/libzpaq.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...
lrzip 缓冲区错误漏洞
lrzip is a compression utility program by the individual developer Con Kolivas. A security vulnerability exists in lrzip version v0.651, which stems from the presence of a heap overflow that allows an attacker to cause a denial of service DoS via a crafted file...