Out-of-Bounds Heap Read Vulnerability in Busybox's unlzma Applet

CVE-2021-42374

What is CVE-2021-42374?

An out-of-bounds heap read vulnerability has been identified in Busybox's unlzma applet, which can lead to the potential for unauthorized information disclosure and denial of service. This is triggered when specially crafted LZMA-compressed input is processed. Attackers can exploit this issue through any relevant applet or format that utilizes the affected functionality, emphasizing the importance of timely updates and security awareness.

References