Skip to main content
VulnerabilityPublished

zxc_decompress_chunk_wrapper_default · Memcpy-param-overlap

Affects zxcSource GCVE Database

0
Severity
Medium

Rated by Threat Radar

Patch
Available – fixed in 399de305e5ca322a0144c86ec85dd77757669c60

Data as of 16 Aug 2026, 15:32 UTC

What to do

Upgrade zxc to 399de305e5ca322a0144c86ec85dd77757669c60.

Affected software

ProductAffectedFixed in
OSS-Fuzzzxcpkg:generic/zxcOther threatsAffected
  • >=b89b134299971f1edd2cefb9f1eaf3d93fdf1dad <399de305e5ca322a0144c86ec85dd77757669c60
Fixed in
  • 399de305e5ca322a0144c86ec85dd77757669c60

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

A patch is available for this vulnerability. Users of the zxc library should apply the official fix to prevent crashes caused by memcpy parameter overlap in the decompression function. No additional mitigation steps are indicated by the vendor or OSS-Fuzz report.

Description

A vulnerability was identified in the zxc library related to a memcpy parameter overlap in the function zxc_decompress_chunk_wrapper_default, as reported by OSS-Fuzz. This issue causes a crash during decompression operations. A patch is available to address this flaw.

References

Community reviews

Loading reviews…