CVEvulnerability

CVE-2021-33453

7.8 HIGH Published 2022-07-26 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2022-07-26
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses: CWE-416

Description

An issue was discovered in lrzip version 0.641. There is a use-after-free in ucompthread() in stream.c:1538.

Affected configurations

• long range zip project long range zip 0.641

Related

Weakness · CWE (1)

CWE-416 Use After Free weakness

References

https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d Exploit, Third Party Advisory
https://github.com/ckolivas/lrzip/issues/199 Exploit, Issue Tracking, Third Party Advisory
https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d Exploit, Third Party Advisory
https://github.com/ckolivas/lrzip/issues/199 Exploit, Issue Tracking, Third Party Advisory