Bzip3 Project

bzip3_project

7 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (7)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-29421 1Bzip3 Project 1Bzip3 Jun 17, 2026 Apr 6, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 An issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is an out-of-bounds write in bz3_decode_block.
CVE-2023-29420 1Bzip3 Project 1Bzip3 Jun 17, 2026 Apr 6, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 An issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is a crash caused by an invalid memmove in bz3_decode_block.
CVE-2023-29419 1Bzip3 Project 1Bzip3 Jun 17, 2026 Apr 6, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 An issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is a bz3_decode_block out-of-bounds read.
CVE-2023-29418 1Bzip3 Project 1Bzip3 Jun 17, 2026 Apr 6, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 An issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is an xwrite out-of-bounds read.
CVE-2023-29417 1Bzip3 Project 1Bzip3 Jun 17, 2026 Apr 6, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 An issue was discovered in libbzip3.a in bzip3 1.2.2. There is a bz3_decompress out-of-bounds read in certain situations where buffers passed to bzip3 do not contain enough space to be filled with decompressed data. NOTE...Show more An issue was discovered in libbzip3.a in bzip3 1.2.2. There is a bz3_decompress out-of-bounds read in certain situations where buffers passed to bzip3 do not contain enough space to be filled with decompressed data. NOTE: the vendor's perspective is that the observed behavior can only occur for a contract violation, and thus the report is invalid.Show less
CVE-2023-29416 1Bzip3 Project 1Bzip3 Jun 17, 2026 Apr 6, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 An issue was discovered in libbzip3.a in bzip3 before 1.3.0. A bz3_decode_block out-of-bounds write can occur with a crafted archive because bzip3 does not follow the required procedure for interacting with libsais.
CVE-2023-29415 2Bzip3 Project Debian 2Bzip3 Debian Linux Jun 17, 2026 Apr 6, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 An issue was discovered in libbzip3.a in bzip3 before 1.3.0. A denial of service (process hang) can occur with a crafted archive because bzip3 does not follow the required procedure for interacting with libsais.