← Back

Bzip3

bzip3

Vendor: Bzip3 Project • 7 CVEs

CVEs (7)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Bzip3 Project
1Bzip3
Jun 17, 2026
Apr 6, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
An issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is an out-of-bounds write in bz3_decode_block.
1Bzip3 Project
1Bzip3
Jun 17, 2026
Apr 6, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
An issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is a crash caused by an invalid memmove in bz3_decode_block.
1Bzip3 Project
1Bzip3
Jun 17, 2026
Apr 6, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
An issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is a bz3_decode_block out-of-bounds read.
1Bzip3 Project
1Bzip3
Jun 17, 2026
Apr 6, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
An issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is an xwrite out-of-bounds read.
1Bzip3 Project
1Bzip3
Jun 17, 2026
Apr 6, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
An issue was discovered in libbzip3.a in bzip3 1.2.2. There is a bz3_decompress out-of-bounds read in certain situations where buffers passed to bzip3 do not contain enough space to be filled with decompressed data. NOTE...Show more
An issue was discovered in libbzip3.a in bzip3 1.2.2. There is a bz3_decompress out-of-bounds read in certain situations where buffers passed to bzip3 do not contain enough space to be filled with decompressed data. NOTE: the vendor's perspective is that the observed behavior can only occur for a contract violation, and thus the report is invalid.Show less
1Bzip3 Project
1Bzip3
Jun 17, 2026
Apr 6, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
An issue was discovered in libbzip3.a in bzip3 before 1.3.0. A bz3_decode_block out-of-bounds write can occur with a crafted archive because bzip3 does not follow the required procedure for interacting with libsais.
2Bzip3 Project
Debian
2Bzip3
Debian Linux
Jun 17, 2026
Apr 6, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
An issue was discovered in libbzip3.a in bzip3 before 1.3.0. A denial of service (process hang) can occur with a crafted archive because bzip3 does not follow the required procedure for interacting with libsais.