CVE-2025-9396

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-9396
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-9396.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-9396
Downstream
Related
Published
2025-08-24T22:32:07.835Z
Modified
2026-07-15T01:49:11.428545278Z
Severity
  • 1.9 (Low) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
ckolivas lrzip strtol_l.c __GI_____strtol_l_internal null pointer dereference
Details

A security flaw has been discovered in ckolivas lrzip up to 0.651. This impacts the function GI__strtollinternal of the file strtoll.c. Performing manipulation results in null pointer dereference. The attack is only possible with local access. The exploit has been released to the public and may be exploited.

Database specific 
{
    "cna_assigner": "VulDB",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/9xxx/CVE-2025-9396.json",
    "cwe_ids": [
        "CWE-404",
        "CWE-476"
    ]
}
References

Affected packages

Git / github.com/ckolivas/lrzip

Affected ranges

Type
GIT
Repo
https://github.com/ckolivas/lrzip
Events
Introduced
e5e9a61fccfd7eff1475bd209e5db11824d88369
Last affected
e5e9a61fccfd7eff1475bd209e5db11824d88369
Database specific 
{
    "cpe": "cpe:2.3:a:ckolivas:lrzip:*:*:*:*:*:*:*:*",
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ],
    "extracted_events": [
        {
            "introduced": "0.651"
        },
        {
            "last_affected": "0.651"
        },
        {
            "introduced": "0"
        }
    ]
}

Affected versions

0.*
0.651
v0.*
v0.651

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-9396.json"