CVE-2025-9396
ckolivas lrzip strtol_l.c __GI_____strtol_l_internal null pointer dereference
Summary
ckolivas lrzip strtol_l.c __GI_____strtol_l_internal null pointer dereference
Original description
The description as published by the source.
A security flaw has been discovered in ckolivas lrzip up to 0.651. This impacts the function __GI_____strtol_l_internal of the file strtol_l.c. Performing manipulation results in null pointer dereference. The attack is only possible with local access. The exploit has been released to the public and may be exploited.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2025-9396 lrzip
- Ubuntu UBUNTU-CVE-2025-9396 lrzip
References
- advisory github.com
- advisory nvd.nist.gov
- advisory vuldb.com
- advisory vuldb.com
- report github.com
- report vuldb.com
- report drive.google.com