Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2026-42250

Off-by-One Leading to Out-of-Bounds Write in bzip2

Description

bzip2 contains an off‑by‑one error in the bzip2recover utility. When processing a specially crafted file, the application performs an out‑of‑bounds write to a global buffer, resulting in memory corruption and a crash (denial of service). This issue was fixed in bzip2 patch 35d122a3df8b0cc4082a4d89fdc6ee99f375fe67

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

bzip2 bzip2

Default version status: unaffected

  • 0 to ≤ 1.0.8affected
  • 35d122a3df8b0cc4082a4d89fdc6ee99f375fe67unaffected

References