Every CVE Search/ Get API key

CVE-2025-15570

ckolivas lrzip stream.c lzma_decompress_buf use after free

4.8 MediumFix available

A vulnerability was found in ckolivas lrzip up to 0.651. This impacts the function lzma_decompress_buf of the file stream.c. Performing a manipulation results in use after free. Attacking locally is a requirement. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
Low

Exploit likelihood

0.23%Up 0.2 points since Feb 11, 2026
90%50%10%1%

What each source reports

CVE List Score used 4.8

ckolivas lrzip stream.c lzma_decompress_buf use after free

A vulnerability was found in ckolivas lrzip up to 0.651. This impacts the function lzma_decompress_buf of the file stream.c. Performing a manipulation results in use after free. Attacking locally is a requirement. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Record
CVE-2025-15570
CVSS 4.0
4.8 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
CVSS 3.0
5.3 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
CVSS 2.0
4.3 AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR
Weakness
CWE-416, CWE-119
Updated
2026-11-02
EUVDEUVD-2025-207358 4.8

A vulnerability was found in ckolivas lrzip up to 0.651. This impacts the function lzma_decompress_buf of the file stream.c. Performing a manipulation results in use after free. Attacking locally is a requirement. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Record
EUVD-2025-207358
CVSS 4.0
4.8 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Updated
2026-11-02
GitHub AdvisoriesGHSA-6gcc-w636-fgv2 1.9

A vulnerability was found in ckolivas lrzip up to 0.651. This impacts the function...

A vulnerability was found in ckolivas lrzip up to 0.651. This impacts the function lzma_decompress_buf of the file stream.c. Performing a manipulation results in use after free. Attacking locally is a requirement. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Record
GHSA-6gcc-w636-fgv2
CVSS 4.0
1.9 LowCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Weakness
CWE-119
Updated
2026-11-02
NVD 1.9

A vulnerability was found in ckolivas lrzip up to 0.651. This impacts the function lzma_decompress_buf of the file stream.c. Performing a manipulation results in use after free. Attacking locally is a requirement. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Record
CVE-2025-15570
CVSS 4.0
1.9 LowCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
4.3 MediumAV:L/AC:L/Au:S/C:P/I:P/A:P
Weakness
CWE-119, CWE-416
Updated
2026-11-02
OSV 1.9

ckolivas lrzip stream.c lzma_decompress_buf use after free

A vulnerability was found in ckolivas lrzip up to 0.651. This impacts the function lzma_decompress_buf of the file stream.c. Performing a manipulation results in use after free. Attacking locally is a requirement. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Record
CVE-2025-15570
CVSS 4.0
1.9 LowCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Weakness
CWE-119, CWE-416
Updated
2026-11-02
OSVDEBIAN-CVE-2025-15570 7.8

A vulnerability was found in ckolivas lrzip up to 0.651. This impacts the function lzma_decompress_buf of the file stream.c. Performing a manipulation results in use after free. Attacking locally is a requirement. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Record
DEBIAN-CVE-2025-15570
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 4 moreShow less
OSVUBUNTU-CVE-2025-15570 1.9

A vulnerability was found in ckolivas lrzip up to 0.651. This impacts the function lzma_decompress_buf of the file stream.c. Performing a manipulation results in use after free. Attacking locally is a requirement. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Record
UBUNTU-CVE-2025-15570
CVSS 4.0
1.9 LowCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVMGASA-2026-0292 No score

Updated lrzip package fixes security vulnerabilities

The updated package fixes security vulnerabilities: ckolivas lrzip stream.c lzma_decompress_buf use after free. (CVE-2025-15570) ckolivas lrzip strtol_l.c __GI_____strtol_l_internal null pointer dereference. (CVE-2025-9396)

Record
MGASA-2026-0292
Updated
2026-11-02
OSVopenSUSE-SU-2026:11093-1 No score

lrzip-0.660-1.1 on GA media

These are all security issues fixed in the lrzip-0.660-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11093-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21179-1 No score

Security update for lrzip

This update for lrzip fixes the following issues:

Changes in lrzip:

  • Update to version 0.660:
    • Do not clean up thread structures in decompression failure conditions, fixing a use-after-free in lzma_decompress_buf() and a NULL pointer dereference in ucompthread() on corrupt/malicious archives (CVE-2025-15570, boo#1258016; CVE-2025-15571, boo#1258023)
    • Handle -L given without a parameter, fixing a NULL pointer dereference (CVE-2025-9396, boo#1248598)
    • Add write bounds checking in libzpaq and sanity checks for maliciously encoded headers and oversized allocations
    • Various STDIO, portability and build fixes (OpenBSD support, non-x86 zpaq, autoconf warnings); drop Doxygen doc build
Record
openSUSE-SU-2026:21179-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
lrzip
Debian:12
 All versions, plus listed versions
0.651-20.651-30.660-1
 None known
lrzip
Debian:13
 All versions, plus listed versions
0.651-30.660-1
 None known
lrzip
Debian:14
 before 0.660-1, plus listed versions
0.651-3
0.660-1
lrzip
Mageia:10
From an advisory covering 2 CVEs
 before 0.660-1.mga10
0.660-1.mga10
lrzip
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
0.608-20.616-10.616-1ubuntu0.1~esm0.616-1ubuntu0.1~esm10.616-1ubuntu0.1~esm2
 None known
lrzip
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
0.621-10.621-1ubuntu0.1~esm10.621-1ubuntu0.1~esm2
 None known
lrzip
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
0.631-10.631-1ubuntu0.1~esm10.631-1+deb9u1build0.18.04.10.631-1+deb9u3build0.18.04.1
 None known
lrzip
Ubuntu:20.04:LTS
 All versions, plus listed versions
0.631+git180528-10.631+git180528-1build10.631+git180528-1+deb10u1build0.20.04.1
 None known
lrzip
Ubuntu:22.04:LTS
 All versions, plus listed versions
0.641-10.651-20.651-2ubuntu0.22.04.1
 None known
lrzip
Ubuntu:24.04:LTS
 All versions, plus listed versions
0.651-2ubuntu1
 None known
Show 5 moreShow less
Affected packages
PackageAffectedFixed
lrzip
Ubuntu:25.10
 All versions, plus listed versions
0.651-2ubuntu10.651-3
 None known
lrzip
Ubuntu:26.10
 All versions, plus listed versions
0.660-1
 None known
lrzip
Ubuntu:26.04:LTS
 All versions, plus listed versions
0.651-30.651-3build10.660-1
 None known
lrzip
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 0.660-1.1
0.660-1.1
lrzip
openSUSE:Leap 16.0
From an advisory covering 3 CVEs
 before 0.660-bp160.1.1
0.660-bp160.1.1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-15570 is a medium vulnerability (CVSS 4.8) in Ckolivas Lrzip, published February 10, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.23%, the 13th percentile. Fixed in lrzip 0.660-1.

References

Show 17 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open