CVE-2025-15570mediumCWE-119CWE-416

CVE-2025-15570: falha de média gravidade em ckolivas lrzip

ckolivas lrzip stream.c lzma_decompress_buf use after free

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar lrzip+ Monitorar lrzip

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.8epss 0.2%
A vulnerability was found in ckolivas lrzip up to 0.651. This impacts the function lzma_decompress_buf of the file stream.c. Performing a manipulation results in use after free. Attacking locally is a requirement. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
ckolivas · lrzip
CVEs relacionadas — ckolivas lrzip

No mesmo produto, das mais perigosas para as menos.

CVE-2025-9396MEDIUMckolivas lrzip strtol_l.c __GI_____strtol_l_internal null pointer dereferenceEPSS 0.3%CVE-2025-15571MEDIUMckolivas lrzip stream.c ucompthread null pointer dereferenceEPSS 0.2%