CVE-2023-39743

MediumCVSS 5.3

Published: 17/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.67%

47th percentile - higher than 47% of all known CVEs

Version 23.01 of lrzip-next was discovered to contain an access violation in the component /bz3_decode_block src/libbz3.c.

This violation may lead to unauthorized memory access, posing a risk to system integrity.

It is recommended to update to the latest version of lrzip-next to mitigate this vulnerability.

Original NVD description (English source)

lrzip-next LZMA v23.01 was discovered to contain an access violation via the component /bz3_decode_block src/libbz3.c.