4.8
/ 10
MEDIUM
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Description
A security flaw has been discovered in ckolivas lrzip up to 0.651. This impacts the function __GI_____strtol_l_internal of the file strtol_l.c. Performing manipulation results in null pointer dereference. The attack is only possible with local access. The exploit has been released to the public and may be exploited.
Basic Information
ID
CVE-2025-9396
Source
VulDB
Published
Aug 24, 2025 at 22:32
Affected Product
Vendor
ckolivas
Product
lrzip
Version
0.651
Affected Versions
ckolivas lrzip 0.651