Threats tagged 'ghsa-6gcc-w636-fgv2'

A use-after-free vulnerability exists in the lzma_decompress_buf function of the stream.c file in ckolivas lrzip versions up to 0.651. This vulnerability requires local access to exploit and can lead to limited confidentiality, integrity, and availability impacts. Public exploit code is available, but no official patch or vendor response has been provided yet.