Early Access — Mondoo Vulnerability Intelligence is currently in preview.
An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that
Exploitability
AV:LAC:HPR:LUI:NScope
S:UImpact
C:LI:NA:H5.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:HMemory Safety