CVE 4.8 MEDIUM

ckolivas lrzip strtol_l.c __GI_____strtol_l_internal null pointer dereference_CVE-2025-9396

4.8 / 10
MEDIUM
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

Description

A security flaw has been discovered in ckolivas lrzip up to 0.651. This impacts the function __GI_____strtol_l_internal of the file strtol_l.c. Performing manipulation results in null pointer dereference. The attack is only possible with local access. The exploit has been released to the public and may be exploited.

Basic Information

ID CVE-2025-9396
Source VulDB
Published Aug 24, 2025 at 22:32

Affected Product

Vendor ckolivas
Product lrzip
Version 0.651
Affected Versions ckolivas lrzip 0.651

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.