Article

    Cyber News / Article / Vulnerability in bzip2 software

    Vulnerability in bzip2 software
    CE
    CERT Polska-2026-05-28

    Vulnerability in bzip2 software

    CERT Polska has received a report about vulnerability in bzip2 software and participated in coordination of its disclosure.

    The vulnerabilityCVE-2026-42250: bzip2 contains an off‑by‑one error in the bzip2recover utility. When processing a specially crafted file, the application performs an out‑of‑bounds write to a global buffer, resulting in memory corruption and a crash (denial of service).

    This issue was fixed in bzip2 patch 35d122a3df8b0cc4082a4d89fdc6ee99f375fe67

    We thank Michał Majchrowicz and Marcin Wyczechowski from AFINE Team for the responsible vulnerability report.

    Original source

    You might Also like

    HelmGuard Raises $7.3 Million for Agentic GRC and Security
    Io
    Ionut Arghire-1 day ago

    HelmGuard Raises $7.3 Million for Agentic GRC and Security

    Hackers Chain Chrome and Windows Zero-Days in New BlueMoon Exploit Kit Attacks
    Gu
    Guru Baran-1 day ago

    Hackers Chain Chrome and Windows Zero-Days in New BlueMoon Exploit Kit Attacks

    AI Is Giving Lesser-Resourced Attackers Nation-State-Level Reach, Google Warns
    Ke
    Kevin Townsend-1 day ago

    AI Is Giving Lesser-Resourced Attackers Nation-State-Level Reach, Google Warns