CVE-2018-16985

In Lizard (formerly LZ5) 2.0, use of an invalid memory address was discovered in LZ5_compress_continue in lz5_compress.c, related to LZ5_compress_fastSmall and…

published September 13, 2018

CVSS
—
EPSS
1%
Percentile
73.6
In the wild
Unconfirmed
What it is

In Lizard (formerly LZ5) 2.0, use of an invalid memory address was discovered in LZ5_compress_continue in lz5_compress.c, related to LZ5_compress_fastSmall and MEM_read32. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01480 · 73.6th percentile
Published
2018-09-13T14:00Z
EPSS history
Timeline
  • 13 SEP 14:00Z
    In Lizard (formerly LZ5) 2.0, use of an invalid memory address was discovered in LZ5_compress_continue in lz5_compress.c, related to LZ5_compress_fastSmall and…
    cvelistv5