CVE-2025-15570

A vulnerability was found in ckolivas lrzip up to 0.651. This impacts the function lzma_decompress_buf of the file stream.c. Performing a manipulation results in use after free. Attacking locally is a requirement. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

• CWE-119
• CWE-416

• https://github.com/ckolivas/lrzip/Product
• https://github.com/ckolivas/lrzip/issues/262Exploit, Issue Tracking
• https://github.com/user-attachments/files/21709004/PoC_UAF.zipExploit
• https://vuldb.com/?ctiid.344926Permissions Required, VDB Entry
• https://vuldb.com/?id.344926Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.752595Exploit, Third Party Advisory, VDB Entry
• https://lists.debian.org/debian-lts-announce/2026/05/msg00011.html

Published

Feb 10, 2026

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-15565The Nexi XPay plugin for WordPress is vulnerable to unauthor…5.3
• CVE-2025-15566A security issue was discovered in ingress-nginx where the `…8.8
• CVE-2025-15567Insufficient protection mechanisms in the Health Module may …3.3
• CVE-2025-15568A command injection vulnerability was identified in the web …8
• CVE-2025-15569A flaw has been found in Artifex MuPDF up to 1.26.1 on Windo…7.3
• CVE-2025-1557A vulnerability, which was classified as problematic, was fo…5.3
• CVE-2025-15571A security vulnerability has been detected in ckolivas lrzip…5.5
• CVE-2025-15572A vulnerability has been found in wasm3 up to 0.5.0. The aff…5.5
• CVE-2025-15573The affected devices do not validate the server certificate …9.4
• CVE-2025-15574When connecting to the Solax Cloud MQTT server the username …6.5
• CVE-2025-15575The firmware update functionality does not verify the authen…5.3
• CVE-2025-15576If two sibling jails are restricted to separate filesystem t…7.5