Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was found in ckolivas lrzip up to 0.651. This impacts the function lzma_decompress_buf of the file stream.c. Performing a manipulation results in use after free. Attacking locally is a requirement. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2025-15570 Use-After-Free Vulnerability in lrzip LZMA Decompression Function Up to 0.651 https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-15570
Post summary
The post announces CVE‑2025‑15570, a use‑after‑free flaw in lrzip’s LZMA decompression up to version 0.651, without any PoC, exploit code, active exploitation, patch, or debunking information.
CVE-2025-15570 A vulnerability was found in ckolivas lrzip up to 0.651. This impacts the function lzma_decompress_buf of the file stream.c. Performing a manipulation results in use … https://www.cve.org/CVERecord?id=CVE-2025-15570
Post summary
CVE‑2025‑15570, a vulnerability in lrzip’s lzma_decompress_buf function affecting versions up to 0.651, has been identified and documented, but no exploit, patch, or active exploitation details are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | ckolivas | lrzip | - | - | - |