PT-2026-7264 · Ckolivas · Lrzip

Ziiiro · Publicado 2026-02-10 · Atualizado 2026-02-27 · CVE-2025-15571

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ckolivas lrzip versions up to 0.651

Description A security issue exists in ckolivas lrzip. The ucompthread function within the stream.c file is susceptible to a null pointer dereference. This manipulation can be performed locally. The exploit for this issue has been publicly disclosed. The project maintainers were notified but have not yet responded.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Improper Resource Release

Enumeração de Fraquezas

CWE-476

CWE-404

Identificadores relacionados

CVE-2025-15571

Produtos afetados

Lrzip

Referências · 17

• 🔥 https://github.com/ckolivas/lrzip/issues/263 · Exploit
• 🔥❌ https://github.com/user-attachments/files/21726331/PoC_NPD.zip · Exploit, Deleted
• https://security-tracker.debian.org/tracker/CVE-2025-15571 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-15571 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-15571 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2025-15571 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/2021255237315489967 · Publicação no Twitter
• https://github.com/ckolivas/lrzip · Nota
• https://vuldb.com/?submit.752603 · Nota
• https://ubuntu.com/security/CVE-2025-15571 · Aviso do Fabricante
• https://t.me/cveNotify/153521 · Publicação no Telegram
• https://vuldb.com/?id.344931 · Nota
• https://twitter.com/CVEnew/status/2021243234840871218 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-15571 · Aviso do Fabricante
• https://t.me/CVEtracker/44310 · Publicação no Telegram