CVE-2022-26291

Published: 2022-03-28T22:15Z

Last Modified: 2024-11-21T06:53Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaq_decompress_buf() and clear_rulist(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted Irz file. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt