CVE-2023-39743

MEDIUM

Pete4abw Lzma Software Development Kit - Improper Access Control

Title source: rule

lrzip-next LZMA v23.01 was discovered to contain an access violation via the component /bz3_decode_block src/libbz3.c.

Core 3

Core References

Various Sources

Technical Description

Exploit, Issue Tracking

CVSS v3 5.3

EPSS 0.0006

EPSS Percentile 18.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact partial

CWE

CWE-284

Status published

Products (1)

pete4abw/lzma_software_development_kit 23.01

Published Aug 17, 2023

Tracked Since Feb 18, 2026