VYPR
← All advisories
High severity7.8OSV Advisory· Published May 26, 2018· Updated Jun 17, 2026

CVE-2018-11498

CVE-2018-11498

Description

In Lizard v1.0 and LZ5 v2.0 (the prior release, before the product was renamed), there is an unchecked buffer size during a memcpy in the Lizard_decompress_LIZv1 function (lib/lizard_decompress_liz.h). Remote attackers can leverage this vulnerability to cause a denial of service via a crafted input file, as well as achieve remote code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Inikep/LizardOSV2 versions
    r131b, r132, v1.0, …+ 1 more
    • (no CPE)range: r131b, r132, v1.0, …
    • (no CPE)range: =1.0
  • Inikep/LZ5llm-create
    Range: =2.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.